syntax = "proto3";

package ocsf.v1_0_0.events.system.enums;

option go_package = "/ocsf/v1_0_0/events/system/enums";

option java_package = "com.your.project.generated.ocsf.v1_0_0.events.system.enums";

option java_multiple_files = true;

enum MODULE_ACTIVITY_STATUS_ID {
	MODULE_ACTIVITY_STATUS_ID_UNKNOWN = 0; // Type: OCSF_VALUE; EnumValue: 0;
	MODULE_ACTIVITY_STATUS_ID_SUCCESS = 1; // Type: OCSF_VALUE; EnumValue: 1;
	MODULE_ACTIVITY_STATUS_ID_FAILURE = 2; // Type: OCSF_VALUE; EnumValue: 2;
	MODULE_ACTIVITY_STATUS_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum MEMORY_ACTIVITY_CLASS_UID {
	MEMORY_ACTIVITY_CLASS_UID_UNSPECIFIED = 0; // Type: NON_OCSF_VALUE;
	MEMORY_ACTIVITY_CLASS_UID_MEMORY_ACTIVITY = 1004; // Type: OCSF_VALUE; EnumValue: 1004;
}

enum SYSTEM_DISPOSITION_ID {
	SYSTEM_DISPOSITION_ID_UNKNOWN = 0; // Type: OCSF_VALUE; EnumValue: 0;
	SYSTEM_DISPOSITION_ID_ALLOWED = 1; // Type: OCSF_VALUE; EnumValue: 1;
	SYSTEM_DISPOSITION_ID_BLOCKED = 2; // Type: OCSF_VALUE; EnumValue: 2;
	SYSTEM_DISPOSITION_ID_QUARANTINED = 3; // Type: OCSF_VALUE; EnumValue: 3;
	SYSTEM_DISPOSITION_ID_ISOLATED = 4; // Type: OCSF_VALUE; EnumValue: 4;
	SYSTEM_DISPOSITION_ID_DELETED = 5; // Type: OCSF_VALUE; EnumValue: 5;
	SYSTEM_DISPOSITION_ID_DROPPED = 6; // Type: OCSF_VALUE; EnumValue: 6;
	SYSTEM_DISPOSITION_ID_CUSTOM_ACTION = 7; // EnumValue: 7; Type: OCSF_VALUE;
	SYSTEM_DISPOSITION_ID_APPROVED = 8; // Type: OCSF_VALUE; EnumValue: 8;
	SYSTEM_DISPOSITION_ID_RESTORED = 9; // Type: OCSF_VALUE; EnumValue: 9;
	SYSTEM_DISPOSITION_ID_EXONERATED = 10; // Type: OCSF_VALUE; EnumValue: 10;
	SYSTEM_DISPOSITION_ID_CORRECTED = 11; // EnumValue: 11; Type: OCSF_VALUE;
	SYSTEM_DISPOSITION_ID_PARTIALLY_CORRECTED = 12; // Type: OCSF_VALUE; EnumValue: 12;
	SYSTEM_DISPOSITION_ID_UNCORRECTED = 13; // Type: OCSF_VALUE; EnumValue: 13;
	SYSTEM_DISPOSITION_ID_DELAYED = 14; // Type: OCSF_VALUE; EnumValue: 14;
	SYSTEM_DISPOSITION_ID_DETECTED = 15; // Type: OCSF_VALUE; EnumValue: 15;
	SYSTEM_DISPOSITION_ID_NO_ACTION = 16; // Type: OCSF_VALUE; EnumValue: 16;
	SYSTEM_DISPOSITION_ID_LOGGED = 17; // Type: OCSF_VALUE; EnumValue: 17;
	SYSTEM_DISPOSITION_ID_TAGGED = 18; // Type: OCSF_VALUE; EnumValue: 18;
	SYSTEM_DISPOSITION_ID_OTHER = 99; // EnumValue: 99; Type: OCSF_VALUE;
}

enum SCHEDULED_JOB_ACTIVITY_SEVERITY_ID {
	SCHEDULED_JOB_ACTIVITY_SEVERITY_ID_UNKNOWN = 0; // Type: OCSF_VALUE; EnumValue: 0;
	SCHEDULED_JOB_ACTIVITY_SEVERITY_ID_INFORMATIONAL = 1; // Type: OCSF_VALUE; EnumValue: 1;
	SCHEDULED_JOB_ACTIVITY_SEVERITY_ID_LOW = 2; // EnumValue: 2; Type: OCSF_VALUE;
	SCHEDULED_JOB_ACTIVITY_SEVERITY_ID_MEDIUM = 3; // Type: OCSF_VALUE; EnumValue: 3;
	SCHEDULED_JOB_ACTIVITY_SEVERITY_ID_HIGH = 4; // Type: OCSF_VALUE; EnumValue: 4;
	SCHEDULED_JOB_ACTIVITY_SEVERITY_ID_CRITICAL = 5; // Type: OCSF_VALUE; EnumValue: 5;
	SCHEDULED_JOB_ACTIVITY_SEVERITY_ID_FATAL = 6; // Type: OCSF_VALUE; EnumValue: 6;
	SCHEDULED_JOB_ACTIVITY_SEVERITY_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum REGISTRY_VALUE_ACTIVITY_CATEGORY_UID {
	REGISTRY_VALUE_ACTIVITY_CATEGORY_UID_UNSPECIFIED = 0; // Type: NON_OCSF_VALUE;
	REGISTRY_VALUE_ACTIVITY_CATEGORY_UID_SYSTEM_ACTIVITY = 1; // Type: OCSF_VALUE; EnumValue: 1;
}

enum KERNEL_EXTENSION_TYPE_UID {
	KERNEL_EXTENSION_TYPE_UID_UNSPECIFIED = 0; // Type: NON_OCSF_VALUE;
	KERNEL_EXTENSION_TYPE_UID_KERNEL_EXTENSION_ACTIVITY_UNKNOWN = 100200; // EnumValue: 100200; Type: OCSF_VALUE;
	KERNEL_EXTENSION_TYPE_UID_KERNEL_EXTENSION_ACTIVITY_LOAD = 100201; // Type: OCSF_VALUE; EnumValue: 100201;
	KERNEL_EXTENSION_TYPE_UID_KERNEL_EXTENSION_ACTIVITY_UNLOAD = 100202; // Type: OCSF_VALUE; EnumValue: 100202;
	KERNEL_EXTENSION_TYPE_UID_KERNEL_EXTENSION_ACTIVITY_OTHER = 100299; // Type: OCSF_VALUE; EnumValue: 100299;
}

enum RESOURCE_ACTIVITY_CATEGORY_UID {
	RESOURCE_ACTIVITY_CATEGORY_UID_UNSPECIFIED = 0; // Type: NON_OCSF_VALUE;
	RESOURCE_ACTIVITY_CATEGORY_UID_SYSTEM_ACTIVITY = 1; // Type: OCSF_VALUE; EnumValue: 1;
}

enum RESOURCE_ACTIVITY_ACTIVITY_ID {
	RESOURCE_ACTIVITY_ACTIVITY_ID_UNKNOWN = 0; // EnumValue: 0; Type: OCSF_VALUE;
	RESOURCE_ACTIVITY_ACTIVITY_ID_ACCESS = 1; // Type: OCSF_VALUE; EnumValue: 1;
	RESOURCE_ACTIVITY_ACTIVITY_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum SYSTEM_ACTIVITY_ID {
	SYSTEM_ACTIVITY_ID_UNKNOWN = 0; // Type: OCSF_VALUE; EnumValue: 0;
	SYSTEM_ACTIVITY_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum SYSTEM_CATEGORY_UID {
	SYSTEM_CATEGORY_UID_UNSPECIFIED = 0; // Type: NON_OCSF_VALUE;
	SYSTEM_CATEGORY_UID_SYSTEM_ACTIVITY = 1; // Type: OCSF_VALUE; EnumValue: 1;
}

enum KERNEL_ACTIVITY_ACTIVITY_ID {
	KERNEL_ACTIVITY_ACTIVITY_ID_UNKNOWN = 0; // Type: OCSF_VALUE; EnumValue: 0;
	KERNEL_ACTIVITY_ACTIVITY_ID_CREATE = 1; // Type: OCSF_VALUE; EnumValue: 1;
	KERNEL_ACTIVITY_ACTIVITY_ID_READ = 2; // Type: OCSF_VALUE; EnumValue: 2;
	KERNEL_ACTIVITY_ACTIVITY_ID_DELETE = 3; // Type: OCSF_VALUE; EnumValue: 3;
	KERNEL_ACTIVITY_ACTIVITY_ID_INVOKE = 4; // EnumValue: 4; Type: OCSF_VALUE;
	KERNEL_ACTIVITY_ACTIVITY_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum MEMORY_ACTIVITY_CATEGORY_UID {
	MEMORY_ACTIVITY_CATEGORY_UID_UNSPECIFIED = 0; // Type: NON_OCSF_VALUE;
	MEMORY_ACTIVITY_CATEGORY_UID_SYSTEM_ACTIVITY = 1; // Type: OCSF_VALUE; EnumValue: 1;
}

enum MEMORY_ACTIVITY_DISPOSITION_ID {
	MEMORY_ACTIVITY_DISPOSITION_ID_UNKNOWN = 0; // EnumValue: 0; Type: OCSF_VALUE;
	MEMORY_ACTIVITY_DISPOSITION_ID_ALLOWED = 1; // EnumValue: 1; Type: OCSF_VALUE;
	MEMORY_ACTIVITY_DISPOSITION_ID_BLOCKED = 2; // Type: OCSF_VALUE; EnumValue: 2;
	MEMORY_ACTIVITY_DISPOSITION_ID_QUARANTINED = 3; // Type: OCSF_VALUE; EnumValue: 3;
	MEMORY_ACTIVITY_DISPOSITION_ID_ISOLATED = 4; // Type: OCSF_VALUE; EnumValue: 4;
	MEMORY_ACTIVITY_DISPOSITION_ID_DELETED = 5; // Type: OCSF_VALUE; EnumValue: 5;
	MEMORY_ACTIVITY_DISPOSITION_ID_DROPPED = 6; // Type: OCSF_VALUE; EnumValue: 6;
	MEMORY_ACTIVITY_DISPOSITION_ID_CUSTOM_ACTION = 7; // EnumValue: 7; Type: OCSF_VALUE;
	MEMORY_ACTIVITY_DISPOSITION_ID_APPROVED = 8; // EnumValue: 8; Type: OCSF_VALUE;
	MEMORY_ACTIVITY_DISPOSITION_ID_RESTORED = 9; // Type: OCSF_VALUE; EnumValue: 9;
	MEMORY_ACTIVITY_DISPOSITION_ID_EXONERATED = 10; // Type: OCSF_VALUE; EnumValue: 10;
	MEMORY_ACTIVITY_DISPOSITION_ID_CORRECTED = 11; // Type: OCSF_VALUE; EnumValue: 11;
	MEMORY_ACTIVITY_DISPOSITION_ID_PARTIALLY_CORRECTED = 12; // Type: OCSF_VALUE; EnumValue: 12;
	MEMORY_ACTIVITY_DISPOSITION_ID_UNCORRECTED = 13; // Type: OCSF_VALUE; EnumValue: 13;
	MEMORY_ACTIVITY_DISPOSITION_ID_DELAYED = 14; // Type: OCSF_VALUE; EnumValue: 14;
	MEMORY_ACTIVITY_DISPOSITION_ID_DETECTED = 15; // Type: OCSF_VALUE; EnumValue: 15;
	MEMORY_ACTIVITY_DISPOSITION_ID_NO_ACTION = 16; // Type: OCSF_VALUE; EnumValue: 16;
	MEMORY_ACTIVITY_DISPOSITION_ID_LOGGED = 17; // Type: OCSF_VALUE; EnumValue: 17;
	MEMORY_ACTIVITY_DISPOSITION_ID_TAGGED = 18; // EnumValue: 18; Type: OCSF_VALUE;
	MEMORY_ACTIVITY_DISPOSITION_ID_OTHER = 99; // EnumValue: 99; Type: OCSF_VALUE;
}

enum REGISTRY_KEY_ACTIVITY_CLASS_UID {
	REGISTRY_KEY_ACTIVITY_CLASS_UID_UNSPECIFIED = 0; // Type: NON_OCSF_VALUE;
	REGISTRY_KEY_ACTIVITY_CLASS_UID_REGISTRY_KEY_ACTIVITY = 1001; // Type: OCSF_VALUE; EnumValue: 1001;
}

enum KERNEL_EXTENSION_SEVERITY_ID {
	KERNEL_EXTENSION_SEVERITY_ID_UNKNOWN = 0; // Type: OCSF_VALUE; EnumValue: 0;
	KERNEL_EXTENSION_SEVERITY_ID_INFORMATIONAL = 1; // EnumValue: 1; Type: OCSF_VALUE;
	KERNEL_EXTENSION_SEVERITY_ID_LOW = 2; // EnumValue: 2; Type: OCSF_VALUE;
	KERNEL_EXTENSION_SEVERITY_ID_MEDIUM = 3; // Type: OCSF_VALUE; EnumValue: 3;
	KERNEL_EXTENSION_SEVERITY_ID_HIGH = 4; // Type: OCSF_VALUE; EnumValue: 4;
	KERNEL_EXTENSION_SEVERITY_ID_CRITICAL = 5; // Type: OCSF_VALUE; EnumValue: 5;
	KERNEL_EXTENSION_SEVERITY_ID_FATAL = 6; // Type: OCSF_VALUE; EnumValue: 6;
	KERNEL_EXTENSION_SEVERITY_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum RESOURCE_ACTIVITY_TYPE_UID {
	RESOURCE_ACTIVITY_TYPE_UID_UNSPECIFIED = 0; // Type: NON_OCSF_VALUE;
	RESOURCE_ACTIVITY_TYPE_UID_WINDOWS_RESOURCE_ACTIVITY_ACCESS = 100301; // Type: OCSF_VALUE; EnumValue: 100301;
}

enum RESOURCE_ACTIVITY_STATUS_ID {
	RESOURCE_ACTIVITY_STATUS_ID_UNKNOWN = 0; // Type: OCSF_VALUE; EnumValue: 0;
	RESOURCE_ACTIVITY_STATUS_ID_SUCCESS = 1; // Type: OCSF_VALUE; EnumValue: 1;
	RESOURCE_ACTIVITY_STATUS_ID_FAILURE = 2; // Type: OCSF_VALUE; EnumValue: 2;
	RESOURCE_ACTIVITY_STATUS_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum SCHEDULED_JOB_ACTIVITY_CLASS_UID {
	SCHEDULED_JOB_ACTIVITY_CLASS_UID_UNSPECIFIED = 0; // Type: NON_OCSF_VALUE;
	SCHEDULED_JOB_ACTIVITY_CLASS_UID_SCHEDULED_JOB_ACTIVITY = 1006; // Type: OCSF_VALUE; EnumValue: 1006;
}

enum KERNEL_ACTIVITY_SEVERITY_ID {
	KERNEL_ACTIVITY_SEVERITY_ID_UNKNOWN = 0; // Type: OCSF_VALUE; EnumValue: 0;
	KERNEL_ACTIVITY_SEVERITY_ID_INFORMATIONAL = 1; // Type: OCSF_VALUE; EnumValue: 1;
	KERNEL_ACTIVITY_SEVERITY_ID_LOW = 2; // Type: OCSF_VALUE; EnumValue: 2;
	KERNEL_ACTIVITY_SEVERITY_ID_MEDIUM = 3; // Type: OCSF_VALUE; EnumValue: 3;
	KERNEL_ACTIVITY_SEVERITY_ID_HIGH = 4; // Type: OCSF_VALUE; EnumValue: 4;
	KERNEL_ACTIVITY_SEVERITY_ID_CRITICAL = 5; // Type: OCSF_VALUE; EnumValue: 5;
	KERNEL_ACTIVITY_SEVERITY_ID_FATAL = 6; // Type: OCSF_VALUE; EnumValue: 6;
	KERNEL_ACTIVITY_SEVERITY_ID_OTHER = 99; // EnumValue: 99; Type: OCSF_VALUE;
}

enum REGISTRY_VALUE_ACTIVITY_DISPOSITION_ID {
	REGISTRY_VALUE_ACTIVITY_DISPOSITION_ID_UNKNOWN = 0; // EnumValue: 0; Type: OCSF_VALUE;
	REGISTRY_VALUE_ACTIVITY_DISPOSITION_ID_ALLOWED = 1; // Type: OCSF_VALUE; EnumValue: 1;
	REGISTRY_VALUE_ACTIVITY_DISPOSITION_ID_BLOCKED = 2; // Type: OCSF_VALUE; EnumValue: 2;
	REGISTRY_VALUE_ACTIVITY_DISPOSITION_ID_QUARANTINED = 3; // Type: OCSF_VALUE; EnumValue: 3;
	REGISTRY_VALUE_ACTIVITY_DISPOSITION_ID_ISOLATED = 4; // Type: OCSF_VALUE; EnumValue: 4;
	REGISTRY_VALUE_ACTIVITY_DISPOSITION_ID_DELETED = 5; // EnumValue: 5; Type: OCSF_VALUE;
	REGISTRY_VALUE_ACTIVITY_DISPOSITION_ID_DROPPED = 6; // Type: OCSF_VALUE; EnumValue: 6;
	REGISTRY_VALUE_ACTIVITY_DISPOSITION_ID_CUSTOM_ACTION = 7; // Type: OCSF_VALUE; EnumValue: 7;
	REGISTRY_VALUE_ACTIVITY_DISPOSITION_ID_APPROVED = 8; // Type: OCSF_VALUE; EnumValue: 8;
	REGISTRY_VALUE_ACTIVITY_DISPOSITION_ID_RESTORED = 9; // Type: OCSF_VALUE; EnumValue: 9;
	REGISTRY_VALUE_ACTIVITY_DISPOSITION_ID_EXONERATED = 10; // Type: OCSF_VALUE; EnumValue: 10;
	REGISTRY_VALUE_ACTIVITY_DISPOSITION_ID_CORRECTED = 11; // Type: OCSF_VALUE; EnumValue: 11;
	REGISTRY_VALUE_ACTIVITY_DISPOSITION_ID_PARTIALLY_CORRECTED = 12; // EnumValue: 12; Type: OCSF_VALUE;
	REGISTRY_VALUE_ACTIVITY_DISPOSITION_ID_UNCORRECTED = 13; // Type: OCSF_VALUE; EnumValue: 13;
	REGISTRY_VALUE_ACTIVITY_DISPOSITION_ID_DELAYED = 14; // Type: OCSF_VALUE; EnumValue: 14;
	REGISTRY_VALUE_ACTIVITY_DISPOSITION_ID_DETECTED = 15; // Type: OCSF_VALUE; EnumValue: 15;
	REGISTRY_VALUE_ACTIVITY_DISPOSITION_ID_NO_ACTION = 16; // Type: OCSF_VALUE; EnumValue: 16;
	REGISTRY_VALUE_ACTIVITY_DISPOSITION_ID_LOGGED = 17; // EnumValue: 17; Type: OCSF_VALUE;
	REGISTRY_VALUE_ACTIVITY_DISPOSITION_ID_TAGGED = 18; // Type: OCSF_VALUE; EnumValue: 18;
	REGISTRY_VALUE_ACTIVITY_DISPOSITION_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum REGISTRY_KEY_ACTIVITY_SEVERITY_ID {
	REGISTRY_KEY_ACTIVITY_SEVERITY_ID_UNKNOWN = 0; // Type: OCSF_VALUE; EnumValue: 0;
	REGISTRY_KEY_ACTIVITY_SEVERITY_ID_INFORMATIONAL = 1; // Type: OCSF_VALUE; EnumValue: 1;
	REGISTRY_KEY_ACTIVITY_SEVERITY_ID_LOW = 2; // Type: OCSF_VALUE; EnumValue: 2;
	REGISTRY_KEY_ACTIVITY_SEVERITY_ID_MEDIUM = 3; // Type: OCSF_VALUE; EnumValue: 3;
	REGISTRY_KEY_ACTIVITY_SEVERITY_ID_HIGH = 4; // Type: OCSF_VALUE; EnumValue: 4;
	REGISTRY_KEY_ACTIVITY_SEVERITY_ID_CRITICAL = 5; // Type: OCSF_VALUE; EnumValue: 5;
	REGISTRY_KEY_ACTIVITY_SEVERITY_ID_FATAL = 6; // Type: OCSF_VALUE; EnumValue: 6;
	REGISTRY_KEY_ACTIVITY_SEVERITY_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum REGISTRY_VALUE_ACTIVITY_TYPE_UID {
	REGISTRY_VALUE_ACTIVITY_TYPE_UID_UNSPECIFIED = 0; // Type: NON_OCSF_VALUE;
	REGISTRY_VALUE_ACTIVITY_TYPE_UID_REGISTRY_VALUE_ACTIVITY_GET = 100201; // EnumValue: 100201; Type: OCSF_VALUE;
	REGISTRY_VALUE_ACTIVITY_TYPE_UID_REGISTRY_VALUE_ACTIVITY_SET = 100202; // Type: OCSF_VALUE; EnumValue: 100202;
	REGISTRY_VALUE_ACTIVITY_TYPE_UID_REGISTRY_VALUE_ACTIVITY_MODIFY = 100203; // EnumValue: 100203; Type: OCSF_VALUE;
	REGISTRY_VALUE_ACTIVITY_TYPE_UID_REGISTRY_VALUE_ACTIVITY_DELETE = 100204; // Type: OCSF_VALUE; EnumValue: 100204;
}

enum KERNEL_ACTIVITY_CLASS_UID {
	KERNEL_ACTIVITY_CLASS_UID_UNSPECIFIED = 0; // Type: NON_OCSF_VALUE;
	KERNEL_ACTIVITY_CLASS_UID_KERNEL_ACTIVITY = 1003; // Type: OCSF_VALUE; EnumValue: 1003;
}

enum REGISTRY_VALUE_ACTIVITY_SEVERITY_ID {
	REGISTRY_VALUE_ACTIVITY_SEVERITY_ID_UNKNOWN = 0; // Type: OCSF_VALUE; EnumValue: 0;
	REGISTRY_VALUE_ACTIVITY_SEVERITY_ID_INFORMATIONAL = 1; // Type: OCSF_VALUE; EnumValue: 1;
	REGISTRY_VALUE_ACTIVITY_SEVERITY_ID_LOW = 2; // Type: OCSF_VALUE; EnumValue: 2;
	REGISTRY_VALUE_ACTIVITY_SEVERITY_ID_MEDIUM = 3; // EnumValue: 3; Type: OCSF_VALUE;
	REGISTRY_VALUE_ACTIVITY_SEVERITY_ID_HIGH = 4; // Type: OCSF_VALUE; EnumValue: 4;
	REGISTRY_VALUE_ACTIVITY_SEVERITY_ID_CRITICAL = 5; // Type: OCSF_VALUE; EnumValue: 5;
	REGISTRY_VALUE_ACTIVITY_SEVERITY_ID_FATAL = 6; // Type: OCSF_VALUE; EnumValue: 6;
	REGISTRY_VALUE_ACTIVITY_SEVERITY_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum KERNEL_EXTENSION_STATUS_ID {
	KERNEL_EXTENSION_STATUS_ID_UNKNOWN = 0; // Type: OCSF_VALUE; EnumValue: 0;
	KERNEL_EXTENSION_STATUS_ID_SUCCESS = 1; // Type: OCSF_VALUE; EnumValue: 1;
	KERNEL_EXTENSION_STATUS_ID_FAILURE = 2; // Type: OCSF_VALUE; EnumValue: 2;
	KERNEL_EXTENSION_STATUS_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum SCHEDULED_JOB_ACTIVITY_STATUS_ID {
	SCHEDULED_JOB_ACTIVITY_STATUS_ID_UNKNOWN = 0; // EnumValue: 0; Type: OCSF_VALUE;
	SCHEDULED_JOB_ACTIVITY_STATUS_ID_SUCCESS = 1; // Type: OCSF_VALUE; EnumValue: 1;
	SCHEDULED_JOB_ACTIVITY_STATUS_ID_FAILURE = 2; // Type: OCSF_VALUE; EnumValue: 2;
	SCHEDULED_JOB_ACTIVITY_STATUS_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum PROCESS_ACTIVITY_TYPE_UID {
	PROCESS_ACTIVITY_TYPE_UID_UNSPECIFIED = 0; // Type: NON_OCSF_VALUE;
	PROCESS_ACTIVITY_TYPE_UID_PROCESS_ACTIVITY_UNKNOWN = 100700; // Type: OCSF_VALUE; EnumValue: 100700;
	PROCESS_ACTIVITY_TYPE_UID_PROCESS_ACTIVITY_LAUNCH = 100701; // Type: OCSF_VALUE; EnumValue: 100701;
	PROCESS_ACTIVITY_TYPE_UID_PROCESS_ACTIVITY_TERMINATE = 100702; // Type: OCSF_VALUE; EnumValue: 100702;
	PROCESS_ACTIVITY_TYPE_UID_PROCESS_ACTIVITY_OPEN = 100703; // Type: OCSF_VALUE; EnumValue: 100703;
	PROCESS_ACTIVITY_TYPE_UID_PROCESS_ACTIVITY_INJECT = 100704; // Type: OCSF_VALUE; EnumValue: 100704;
	PROCESS_ACTIVITY_TYPE_UID_PROCESS_ACTIVITY_SET_USER_ID = 100705; // Type: OCSF_VALUE; EnumValue: 100705;
	PROCESS_ACTIVITY_TYPE_UID_PROCESS_ACTIVITY_OTHER = 100799; // Type: OCSF_VALUE; EnumValue: 100799;
}

enum SYSTEM_CLASS_UID {
	SYSTEM_CLASS_UID_UNSPECIFIED = 0; // Type: NON_OCSF_VALUE;
	SYSTEM_CLASS_UID_SYSTEM_ACTIVITY = 1000; // EnumValue: 1000; Type: OCSF_VALUE;
}

enum RESOURCE_ACTIVITY_CLASS_UID {
	RESOURCE_ACTIVITY_CLASS_UID_UNSPECIFIED = 0; // Type: NON_OCSF_VALUE;
	RESOURCE_ACTIVITY_CLASS_UID_WINDOWS_RESOURCE_ACTIVITY = 1003; // Type: OCSF_VALUE; EnumValue: 1003;
}

enum MODULE_ACTIVITY_ACTIVITY_ID {
	MODULE_ACTIVITY_ACTIVITY_ID_UNKNOWN = 0; // Type: OCSF_VALUE; EnumValue: 0;
	MODULE_ACTIVITY_ACTIVITY_ID_LOAD = 1; // Type: OCSF_VALUE; EnumValue: 1;
	MODULE_ACTIVITY_ACTIVITY_ID_UNLOAD = 2; // Type: OCSF_VALUE; EnumValue: 2;
	MODULE_ACTIVITY_ACTIVITY_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum PROCESS_ACTIVITY_SEVERITY_ID {
	PROCESS_ACTIVITY_SEVERITY_ID_UNKNOWN = 0; // Type: OCSF_VALUE; EnumValue: 0;
	PROCESS_ACTIVITY_SEVERITY_ID_INFORMATIONAL = 1; // EnumValue: 1; Type: OCSF_VALUE;
	PROCESS_ACTIVITY_SEVERITY_ID_LOW = 2; // Type: OCSF_VALUE; EnumValue: 2;
	PROCESS_ACTIVITY_SEVERITY_ID_MEDIUM = 3; // Type: OCSF_VALUE; EnumValue: 3;
	PROCESS_ACTIVITY_SEVERITY_ID_HIGH = 4; // Type: OCSF_VALUE; EnumValue: 4;
	PROCESS_ACTIVITY_SEVERITY_ID_CRITICAL = 5; // Type: OCSF_VALUE; EnumValue: 5;
	PROCESS_ACTIVITY_SEVERITY_ID_FATAL = 6; // Type: OCSF_VALUE; EnumValue: 6;
	PROCESS_ACTIVITY_SEVERITY_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum KERNEL_EXTENSION_CATEGORY_UID {
	KERNEL_EXTENSION_CATEGORY_UID_UNSPECIFIED = 0; // Type: NON_OCSF_VALUE;
	KERNEL_EXTENSION_CATEGORY_UID_SYSTEM_ACTIVITY = 1; // EnumValue: 1; Type: OCSF_VALUE;
}

enum SYSTEM_SEVERITY_ID {
	SYSTEM_SEVERITY_ID_UNKNOWN = 0; // Type: OCSF_VALUE; EnumValue: 0;
	SYSTEM_SEVERITY_ID_INFORMATIONAL = 1; // Type: OCSF_VALUE; EnumValue: 1;
	SYSTEM_SEVERITY_ID_LOW = 2; // Type: OCSF_VALUE; EnumValue: 2;
	SYSTEM_SEVERITY_ID_MEDIUM = 3; // EnumValue: 3; Type: OCSF_VALUE;
	SYSTEM_SEVERITY_ID_HIGH = 4; // Type: OCSF_VALUE; EnumValue: 4;
	SYSTEM_SEVERITY_ID_CRITICAL = 5; // Type: OCSF_VALUE; EnumValue: 5;
	SYSTEM_SEVERITY_ID_FATAL = 6; // Type: OCSF_VALUE; EnumValue: 6;
	SYSTEM_SEVERITY_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum FILE_ACTIVITY_CLASS_UID {
	FILE_ACTIVITY_CLASS_UID_UNSPECIFIED = 0; // Type: NON_OCSF_VALUE;
	FILE_ACTIVITY_CLASS_UID_FILE_SYSTEM_ACTIVITY = 1001; // Type: OCSF_VALUE; EnumValue: 1001;
}

enum KERNEL_ACTIVITY_STATUS_ID {
	KERNEL_ACTIVITY_STATUS_ID_UNKNOWN = 0; // EnumValue: 0; Type: OCSF_VALUE;
	KERNEL_ACTIVITY_STATUS_ID_SUCCESS = 1; // Type: OCSF_VALUE; EnumValue: 1;
	KERNEL_ACTIVITY_STATUS_ID_FAILURE = 2; // EnumValue: 2; Type: OCSF_VALUE;
	KERNEL_ACTIVITY_STATUS_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum REGISTRY_VALUE_ACTIVITY_ACTIVITY_ID {
	REGISTRY_VALUE_ACTIVITY_ACTIVITY_ID_UNKNOWN = 0; // EnumValue: 0; Type: OCSF_VALUE;
	REGISTRY_VALUE_ACTIVITY_ACTIVITY_ID_GET = 1; // Type: OCSF_VALUE; EnumValue: 1;
	REGISTRY_VALUE_ACTIVITY_ACTIVITY_ID_SET = 2; // Type: OCSF_VALUE; EnumValue: 2;
	REGISTRY_VALUE_ACTIVITY_ACTIVITY_ID_MODIFY = 3; // Type: OCSF_VALUE; EnumValue: 3;
	REGISTRY_VALUE_ACTIVITY_ACTIVITY_ID_DELETE = 4; // Type: OCSF_VALUE; EnumValue: 4;
	REGISTRY_VALUE_ACTIVITY_ACTIVITY_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum MODULE_ACTIVITY_SEVERITY_ID {
	MODULE_ACTIVITY_SEVERITY_ID_UNKNOWN = 0; // Type: OCSF_VALUE; EnumValue: 0;
	MODULE_ACTIVITY_SEVERITY_ID_INFORMATIONAL = 1; // Type: OCSF_VALUE; EnumValue: 1;
	MODULE_ACTIVITY_SEVERITY_ID_LOW = 2; // Type: OCSF_VALUE; EnumValue: 2;
	MODULE_ACTIVITY_SEVERITY_ID_MEDIUM = 3; // Type: OCSF_VALUE; EnumValue: 3;
	MODULE_ACTIVITY_SEVERITY_ID_HIGH = 4; // Type: OCSF_VALUE; EnumValue: 4;
	MODULE_ACTIVITY_SEVERITY_ID_CRITICAL = 5; // EnumValue: 5; Type: OCSF_VALUE;
	MODULE_ACTIVITY_SEVERITY_ID_FATAL = 6; // Type: OCSF_VALUE; EnumValue: 6;
	MODULE_ACTIVITY_SEVERITY_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum PROCESS_ACTIVITY_INJECTION_TYPE_ID {
	PROCESS_ACTIVITY_INJECTION_TYPE_ID_UNKNOWN = 0; // EnumValue: 0; Type: OCSF_VALUE;
	PROCESS_ACTIVITY_INJECTION_TYPE_ID_REMOTE_THREAD = 1; // Type: OCSF_VALUE; EnumValue: 1;
	PROCESS_ACTIVITY_INJECTION_TYPE_ID_LOAD_LIBRARY = 2; // Type: OCSF_VALUE; EnumValue: 2;
	PROCESS_ACTIVITY_INJECTION_TYPE_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum KERNEL_EXTENSION_DISPOSITION_ID {
	KERNEL_EXTENSION_DISPOSITION_ID_UNKNOWN = 0; // Type: OCSF_VALUE; EnumValue: 0;
	KERNEL_EXTENSION_DISPOSITION_ID_ALLOWED = 1; // EnumValue: 1; Type: OCSF_VALUE;
	KERNEL_EXTENSION_DISPOSITION_ID_BLOCKED = 2; // Type: OCSF_VALUE; EnumValue: 2;
	KERNEL_EXTENSION_DISPOSITION_ID_QUARANTINED = 3; // Type: OCSF_VALUE; EnumValue: 3;
	KERNEL_EXTENSION_DISPOSITION_ID_ISOLATED = 4; // Type: OCSF_VALUE; EnumValue: 4;
	KERNEL_EXTENSION_DISPOSITION_ID_DELETED = 5; // Type: OCSF_VALUE; EnumValue: 5;
	KERNEL_EXTENSION_DISPOSITION_ID_DROPPED = 6; // Type: OCSF_VALUE; EnumValue: 6;
	KERNEL_EXTENSION_DISPOSITION_ID_CUSTOM_ACTION = 7; // Type: OCSF_VALUE; EnumValue: 7;
	KERNEL_EXTENSION_DISPOSITION_ID_APPROVED = 8; // Type: OCSF_VALUE; EnumValue: 8;
	KERNEL_EXTENSION_DISPOSITION_ID_RESTORED = 9; // Type: OCSF_VALUE; EnumValue: 9;
	KERNEL_EXTENSION_DISPOSITION_ID_EXONERATED = 10; // Type: OCSF_VALUE; EnumValue: 10;
	KERNEL_EXTENSION_DISPOSITION_ID_CORRECTED = 11; // Type: OCSF_VALUE; EnumValue: 11;
	KERNEL_EXTENSION_DISPOSITION_ID_PARTIALLY_CORRECTED = 12; // Type: OCSF_VALUE; EnumValue: 12;
	KERNEL_EXTENSION_DISPOSITION_ID_UNCORRECTED = 13; // Type: OCSF_VALUE; EnumValue: 13;
	KERNEL_EXTENSION_DISPOSITION_ID_DELAYED = 14; // Type: OCSF_VALUE; EnumValue: 14;
	KERNEL_EXTENSION_DISPOSITION_ID_DETECTED = 15; // Type: OCSF_VALUE; EnumValue: 15;
	KERNEL_EXTENSION_DISPOSITION_ID_NO_ACTION = 16; // Type: OCSF_VALUE; EnumValue: 16;
	KERNEL_EXTENSION_DISPOSITION_ID_LOGGED = 17; // Type: OCSF_VALUE; EnumValue: 17;
	KERNEL_EXTENSION_DISPOSITION_ID_TAGGED = 18; // Type: OCSF_VALUE; EnumValue: 18;
	KERNEL_EXTENSION_DISPOSITION_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum FILE_ACTIVITY_DISPOSITION_ID {
	FILE_ACTIVITY_DISPOSITION_ID_UNKNOWN = 0; // Type: OCSF_VALUE; EnumValue: 0;
	FILE_ACTIVITY_DISPOSITION_ID_ALLOWED = 1; // EnumValue: 1; Type: OCSF_VALUE;
	FILE_ACTIVITY_DISPOSITION_ID_BLOCKED = 2; // Type: OCSF_VALUE; EnumValue: 2;
	FILE_ACTIVITY_DISPOSITION_ID_QUARANTINED = 3; // Type: OCSF_VALUE; EnumValue: 3;
	FILE_ACTIVITY_DISPOSITION_ID_ISOLATED = 4; // Type: OCSF_VALUE; EnumValue: 4;
	FILE_ACTIVITY_DISPOSITION_ID_DELETED = 5; // EnumValue: 5; Type: OCSF_VALUE;
	FILE_ACTIVITY_DISPOSITION_ID_DROPPED = 6; // Type: OCSF_VALUE; EnumValue: 6;
	FILE_ACTIVITY_DISPOSITION_ID_CUSTOM_ACTION = 7; // Type: OCSF_VALUE; EnumValue: 7;
	FILE_ACTIVITY_DISPOSITION_ID_APPROVED = 8; // EnumValue: 8; Type: OCSF_VALUE;
	FILE_ACTIVITY_DISPOSITION_ID_RESTORED = 9; // Type: OCSF_VALUE; EnumValue: 9;
	FILE_ACTIVITY_DISPOSITION_ID_EXONERATED = 10; // EnumValue: 10; Type: OCSF_VALUE;
	FILE_ACTIVITY_DISPOSITION_ID_CORRECTED = 11; // Type: OCSF_VALUE; EnumValue: 11;
	FILE_ACTIVITY_DISPOSITION_ID_PARTIALLY_CORRECTED = 12; // Type: OCSF_VALUE; EnumValue: 12;
	FILE_ACTIVITY_DISPOSITION_ID_UNCORRECTED = 13; // Type: OCSF_VALUE; EnumValue: 13;
	FILE_ACTIVITY_DISPOSITION_ID_DELAYED = 14; // Type: OCSF_VALUE; EnumValue: 14;
	FILE_ACTIVITY_DISPOSITION_ID_DETECTED = 15; // Type: OCSF_VALUE; EnumValue: 15;
	FILE_ACTIVITY_DISPOSITION_ID_NO_ACTION = 16; // Type: OCSF_VALUE; EnumValue: 16;
	FILE_ACTIVITY_DISPOSITION_ID_LOGGED = 17; // Type: OCSF_VALUE; EnumValue: 17;
	FILE_ACTIVITY_DISPOSITION_ID_TAGGED = 18; // Type: OCSF_VALUE; EnumValue: 18;
	FILE_ACTIVITY_DISPOSITION_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum REGISTRY_KEY_ACTIVITY_DISPOSITION_ID {
	REGISTRY_KEY_ACTIVITY_DISPOSITION_ID_UNKNOWN = 0; // Type: OCSF_VALUE; EnumValue: 0;
	REGISTRY_KEY_ACTIVITY_DISPOSITION_ID_ALLOWED = 1; // Type: OCSF_VALUE; EnumValue: 1;
	REGISTRY_KEY_ACTIVITY_DISPOSITION_ID_BLOCKED = 2; // Type: OCSF_VALUE; EnumValue: 2;
	REGISTRY_KEY_ACTIVITY_DISPOSITION_ID_QUARANTINED = 3; // Type: OCSF_VALUE; EnumValue: 3;
	REGISTRY_KEY_ACTIVITY_DISPOSITION_ID_ISOLATED = 4; // Type: OCSF_VALUE; EnumValue: 4;
	REGISTRY_KEY_ACTIVITY_DISPOSITION_ID_DELETED = 5; // Type: OCSF_VALUE; EnumValue: 5;
	REGISTRY_KEY_ACTIVITY_DISPOSITION_ID_DROPPED = 6; // Type: OCSF_VALUE; EnumValue: 6;
	REGISTRY_KEY_ACTIVITY_DISPOSITION_ID_CUSTOM_ACTION = 7; // Type: OCSF_VALUE; EnumValue: 7;
	REGISTRY_KEY_ACTIVITY_DISPOSITION_ID_APPROVED = 8; // Type: OCSF_VALUE; EnumValue: 8;
	REGISTRY_KEY_ACTIVITY_DISPOSITION_ID_RESTORED = 9; // Type: OCSF_VALUE; EnumValue: 9;
	REGISTRY_KEY_ACTIVITY_DISPOSITION_ID_EXONERATED = 10; // Type: OCSF_VALUE; EnumValue: 10;
	REGISTRY_KEY_ACTIVITY_DISPOSITION_ID_CORRECTED = 11; // Type: OCSF_VALUE; EnumValue: 11;
	REGISTRY_KEY_ACTIVITY_DISPOSITION_ID_PARTIALLY_CORRECTED = 12; // Type: OCSF_VALUE; EnumValue: 12;
	REGISTRY_KEY_ACTIVITY_DISPOSITION_ID_UNCORRECTED = 13; // Type: OCSF_VALUE; EnumValue: 13;
	REGISTRY_KEY_ACTIVITY_DISPOSITION_ID_DELAYED = 14; // Type: OCSF_VALUE; EnumValue: 14;
	REGISTRY_KEY_ACTIVITY_DISPOSITION_ID_DETECTED = 15; // EnumValue: 15; Type: OCSF_VALUE;
	REGISTRY_KEY_ACTIVITY_DISPOSITION_ID_NO_ACTION = 16; // Type: OCSF_VALUE; EnumValue: 16;
	REGISTRY_KEY_ACTIVITY_DISPOSITION_ID_LOGGED = 17; // Type: OCSF_VALUE; EnumValue: 17;
	REGISTRY_KEY_ACTIVITY_DISPOSITION_ID_TAGGED = 18; // EnumValue: 18; Type: OCSF_VALUE;
	REGISTRY_KEY_ACTIVITY_DISPOSITION_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum FILE_ACTIVITY_ACTIVITY_ID {
	FILE_ACTIVITY_ACTIVITY_ID_UNKNOWN = 0; // Type: OCSF_VALUE; EnumValue: 0;
	FILE_ACTIVITY_ACTIVITY_ID_CREATE = 1; // Type: OCSF_VALUE; EnumValue: 1;
	FILE_ACTIVITY_ACTIVITY_ID_READ = 2; // Type: OCSF_VALUE; EnumValue: 2;
	FILE_ACTIVITY_ACTIVITY_ID_UPDATE = 3; // Type: OCSF_VALUE; EnumValue: 3;
	FILE_ACTIVITY_ACTIVITY_ID_DELETE = 4; // Type: OCSF_VALUE; EnumValue: 4;
	FILE_ACTIVITY_ACTIVITY_ID_RENAME = 5; // Type: OCSF_VALUE; EnumValue: 5;
	FILE_ACTIVITY_ACTIVITY_ID_SET_ATTRIBUTES = 6; // Type: OCSF_VALUE; EnumValue: 6;
	FILE_ACTIVITY_ACTIVITY_ID_SET_SECURITY = 7; // Type: OCSF_VALUE; EnumValue: 7;
	FILE_ACTIVITY_ACTIVITY_ID_GET_ATTRIBUTES = 8; // Type: OCSF_VALUE; EnumValue: 8;
	FILE_ACTIVITY_ACTIVITY_ID_GET_SECURITY = 9; // Type: OCSF_VALUE; EnumValue: 9;
	FILE_ACTIVITY_ACTIVITY_ID_ENCRYPT = 10; // Type: OCSF_VALUE; EnumValue: 10;
	FILE_ACTIVITY_ACTIVITY_ID_DECRYPT = 11; // EnumValue: 11; Type: OCSF_VALUE;
	FILE_ACTIVITY_ACTIVITY_ID_MOUNT = 12; // Type: OCSF_VALUE; EnumValue: 12;
	FILE_ACTIVITY_ACTIVITY_ID_UNMOUNT = 13; // EnumValue: 13; Type: OCSF_VALUE;
	FILE_ACTIVITY_ACTIVITY_ID_OPEN = 14; // EnumValue: 14; Type: OCSF_VALUE;
	FILE_ACTIVITY_ACTIVITY_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum FILE_ACTIVITY_CATEGORY_UID {
	FILE_ACTIVITY_CATEGORY_UID_UNSPECIFIED = 0; // Type: NON_OCSF_VALUE;
	FILE_ACTIVITY_CATEGORY_UID_SYSTEM_ACTIVITY = 1; // Type: OCSF_VALUE; EnumValue: 1;
}

enum KERNEL_ACTIVITY_DISPOSITION_ID {
	KERNEL_ACTIVITY_DISPOSITION_ID_UNKNOWN = 0; // Type: OCSF_VALUE; EnumValue: 0;
	KERNEL_ACTIVITY_DISPOSITION_ID_ALLOWED = 1; // EnumValue: 1; Type: OCSF_VALUE;
	KERNEL_ACTIVITY_DISPOSITION_ID_BLOCKED = 2; // Type: OCSF_VALUE; EnumValue: 2;
	KERNEL_ACTIVITY_DISPOSITION_ID_QUARANTINED = 3; // Type: OCSF_VALUE; EnumValue: 3;
	KERNEL_ACTIVITY_DISPOSITION_ID_ISOLATED = 4; // Type: OCSF_VALUE; EnumValue: 4;
	KERNEL_ACTIVITY_DISPOSITION_ID_DELETED = 5; // Type: OCSF_VALUE; EnumValue: 5;
	KERNEL_ACTIVITY_DISPOSITION_ID_DROPPED = 6; // Type: OCSF_VALUE; EnumValue: 6;
	KERNEL_ACTIVITY_DISPOSITION_ID_CUSTOM_ACTION = 7; // Type: OCSF_VALUE; EnumValue: 7;
	KERNEL_ACTIVITY_DISPOSITION_ID_APPROVED = 8; // Type: OCSF_VALUE; EnumValue: 8;
	KERNEL_ACTIVITY_DISPOSITION_ID_RESTORED = 9; // Type: OCSF_VALUE; EnumValue: 9;
	KERNEL_ACTIVITY_DISPOSITION_ID_EXONERATED = 10; // Type: OCSF_VALUE; EnumValue: 10;
	KERNEL_ACTIVITY_DISPOSITION_ID_CORRECTED = 11; // EnumValue: 11; Type: OCSF_VALUE;
	KERNEL_ACTIVITY_DISPOSITION_ID_PARTIALLY_CORRECTED = 12; // Type: OCSF_VALUE; EnumValue: 12;
	KERNEL_ACTIVITY_DISPOSITION_ID_UNCORRECTED = 13; // EnumValue: 13; Type: OCSF_VALUE;
	KERNEL_ACTIVITY_DISPOSITION_ID_DELAYED = 14; // Type: OCSF_VALUE; EnumValue: 14;
	KERNEL_ACTIVITY_DISPOSITION_ID_DETECTED = 15; // Type: OCSF_VALUE; EnumValue: 15;
	KERNEL_ACTIVITY_DISPOSITION_ID_NO_ACTION = 16; // Type: OCSF_VALUE; EnumValue: 16;
	KERNEL_ACTIVITY_DISPOSITION_ID_LOGGED = 17; // Type: OCSF_VALUE; EnumValue: 17;
	KERNEL_ACTIVITY_DISPOSITION_ID_TAGGED = 18; // Type: OCSF_VALUE; EnumValue: 18;
	KERNEL_ACTIVITY_DISPOSITION_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum REGISTRY_KEY_ACTIVITY_CATEGORY_UID {
	REGISTRY_KEY_ACTIVITY_CATEGORY_UID_UNSPECIFIED = 0; // Type: NON_OCSF_VALUE;
	REGISTRY_KEY_ACTIVITY_CATEGORY_UID_SYSTEM_ACTIVITY = 1; // Type: OCSF_VALUE; EnumValue: 1;
}

enum RESOURCE_ACTIVITY_DISPOSITION_ID {
	RESOURCE_ACTIVITY_DISPOSITION_ID_UNKNOWN = 0; // Type: OCSF_VALUE; EnumValue: 0;
	RESOURCE_ACTIVITY_DISPOSITION_ID_ALLOWED = 1; // Type: OCSF_VALUE; EnumValue: 1;
	RESOURCE_ACTIVITY_DISPOSITION_ID_BLOCKED = 2; // Type: OCSF_VALUE; EnumValue: 2;
	RESOURCE_ACTIVITY_DISPOSITION_ID_QUARANTINED = 3; // Type: OCSF_VALUE; EnumValue: 3;
	RESOURCE_ACTIVITY_DISPOSITION_ID_ISOLATED = 4; // Type: OCSF_VALUE; EnumValue: 4;
	RESOURCE_ACTIVITY_DISPOSITION_ID_DELETED = 5; // EnumValue: 5; Type: OCSF_VALUE;
	RESOURCE_ACTIVITY_DISPOSITION_ID_DROPPED = 6; // Type: OCSF_VALUE; EnumValue: 6;
	RESOURCE_ACTIVITY_DISPOSITION_ID_CUSTOM_ACTION = 7; // Type: OCSF_VALUE; EnumValue: 7;
	RESOURCE_ACTIVITY_DISPOSITION_ID_APPROVED = 8; // Type: OCSF_VALUE; EnumValue: 8;
	RESOURCE_ACTIVITY_DISPOSITION_ID_RESTORED = 9; // Type: OCSF_VALUE; EnumValue: 9;
	RESOURCE_ACTIVITY_DISPOSITION_ID_EXONERATED = 10; // Type: OCSF_VALUE; EnumValue: 10;
	RESOURCE_ACTIVITY_DISPOSITION_ID_CORRECTED = 11; // EnumValue: 11; Type: OCSF_VALUE;
	RESOURCE_ACTIVITY_DISPOSITION_ID_PARTIALLY_CORRECTED = 12; // Type: OCSF_VALUE; EnumValue: 12;
	RESOURCE_ACTIVITY_DISPOSITION_ID_UNCORRECTED = 13; // Type: OCSF_VALUE; EnumValue: 13;
	RESOURCE_ACTIVITY_DISPOSITION_ID_DELAYED = 14; // Type: OCSF_VALUE; EnumValue: 14;
	RESOURCE_ACTIVITY_DISPOSITION_ID_DETECTED = 15; // EnumValue: 15; Type: OCSF_VALUE;
	RESOURCE_ACTIVITY_DISPOSITION_ID_NO_ACTION = 16; // Type: OCSF_VALUE; EnumValue: 16;
	RESOURCE_ACTIVITY_DISPOSITION_ID_LOGGED = 17; // Type: OCSF_VALUE; EnumValue: 17;
	RESOURCE_ACTIVITY_DISPOSITION_ID_TAGGED = 18; // EnumValue: 18; Type: OCSF_VALUE;
	RESOURCE_ACTIVITY_DISPOSITION_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum FILE_ACTIVITY_STATUS_ID {
	FILE_ACTIVITY_STATUS_ID_UNKNOWN = 0; // Type: OCSF_VALUE; EnumValue: 0;
	FILE_ACTIVITY_STATUS_ID_SUCCESS = 1; // Type: OCSF_VALUE; EnumValue: 1;
	FILE_ACTIVITY_STATUS_ID_FAILURE = 2; // EnumValue: 2; Type: OCSF_VALUE;
	FILE_ACTIVITY_STATUS_ID_OTHER = 99; // EnumValue: 99; Type: OCSF_VALUE;
}

enum MEMORY_ACTIVITY_STATUS_ID {
	MEMORY_ACTIVITY_STATUS_ID_UNKNOWN = 0; // Type: OCSF_VALUE; EnumValue: 0;
	MEMORY_ACTIVITY_STATUS_ID_SUCCESS = 1; // Type: OCSF_VALUE; EnumValue: 1;
	MEMORY_ACTIVITY_STATUS_ID_FAILURE = 2; // Type: OCSF_VALUE; EnumValue: 2;
	MEMORY_ACTIVITY_STATUS_ID_OTHER = 99; // EnumValue: 99; Type: OCSF_VALUE;
}

enum SCHEDULED_JOB_ACTIVITY_DISPOSITION_ID {
	SCHEDULED_JOB_ACTIVITY_DISPOSITION_ID_UNKNOWN = 0; // Type: OCSF_VALUE; EnumValue: 0;
	SCHEDULED_JOB_ACTIVITY_DISPOSITION_ID_ALLOWED = 1; // EnumValue: 1; Type: OCSF_VALUE;
	SCHEDULED_JOB_ACTIVITY_DISPOSITION_ID_BLOCKED = 2; // Type: OCSF_VALUE; EnumValue: 2;
	SCHEDULED_JOB_ACTIVITY_DISPOSITION_ID_QUARANTINED = 3; // Type: OCSF_VALUE; EnumValue: 3;
	SCHEDULED_JOB_ACTIVITY_DISPOSITION_ID_ISOLATED = 4; // Type: OCSF_VALUE; EnumValue: 4;
	SCHEDULED_JOB_ACTIVITY_DISPOSITION_ID_DELETED = 5; // Type: OCSF_VALUE; EnumValue: 5;
	SCHEDULED_JOB_ACTIVITY_DISPOSITION_ID_DROPPED = 6; // Type: OCSF_VALUE; EnumValue: 6;
	SCHEDULED_JOB_ACTIVITY_DISPOSITION_ID_CUSTOM_ACTION = 7; // Type: OCSF_VALUE; EnumValue: 7;
	SCHEDULED_JOB_ACTIVITY_DISPOSITION_ID_APPROVED = 8; // Type: OCSF_VALUE; EnumValue: 8;
	SCHEDULED_JOB_ACTIVITY_DISPOSITION_ID_RESTORED = 9; // Type: OCSF_VALUE; EnumValue: 9;
	SCHEDULED_JOB_ACTIVITY_DISPOSITION_ID_EXONERATED = 10; // Type: OCSF_VALUE; EnumValue: 10;
	SCHEDULED_JOB_ACTIVITY_DISPOSITION_ID_CORRECTED = 11; // EnumValue: 11; Type: OCSF_VALUE;
	SCHEDULED_JOB_ACTIVITY_DISPOSITION_ID_PARTIALLY_CORRECTED = 12; // Type: OCSF_VALUE; EnumValue: 12;
	SCHEDULED_JOB_ACTIVITY_DISPOSITION_ID_UNCORRECTED = 13; // Type: OCSF_VALUE; EnumValue: 13;
	SCHEDULED_JOB_ACTIVITY_DISPOSITION_ID_DELAYED = 14; // Type: OCSF_VALUE; EnumValue: 14;
	SCHEDULED_JOB_ACTIVITY_DISPOSITION_ID_DETECTED = 15; // EnumValue: 15; Type: OCSF_VALUE;
	SCHEDULED_JOB_ACTIVITY_DISPOSITION_ID_NO_ACTION = 16; // Type: OCSF_VALUE; EnumValue: 16;
	SCHEDULED_JOB_ACTIVITY_DISPOSITION_ID_LOGGED = 17; // Type: OCSF_VALUE; EnumValue: 17;
	SCHEDULED_JOB_ACTIVITY_DISPOSITION_ID_TAGGED = 18; // Type: OCSF_VALUE; EnumValue: 18;
	SCHEDULED_JOB_ACTIVITY_DISPOSITION_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum REGISTRY_VALUE_ACTIVITY_CLASS_UID {
	REGISTRY_VALUE_ACTIVITY_CLASS_UID_UNSPECIFIED = 0; // Type: NON_OCSF_VALUE;
	REGISTRY_VALUE_ACTIVITY_CLASS_UID_REGISTRY_VALUE_ACTIVITY = 1002; // Type: OCSF_VALUE; EnumValue: 1002;
}

enum SCHEDULED_JOB_ACTIVITY_CATEGORY_UID {
	SCHEDULED_JOB_ACTIVITY_CATEGORY_UID_UNSPECIFIED = 0; // Type: NON_OCSF_VALUE;
	SCHEDULED_JOB_ACTIVITY_CATEGORY_UID_SYSTEM_ACTIVITY = 1; // Type: OCSF_VALUE; EnumValue: 1;
}

enum KERNEL_EXTENSION_CLASS_UID {
	KERNEL_EXTENSION_CLASS_UID_UNSPECIFIED = 0; // Type: NON_OCSF_VALUE;
	KERNEL_EXTENSION_CLASS_UID_KERNEL_EXTENSION_ACTIVITY = 1002; // Type: OCSF_VALUE; EnumValue: 1002;
}

enum RESOURCE_ACTIVITY_SEVERITY_ID {
	RESOURCE_ACTIVITY_SEVERITY_ID_UNKNOWN = 0; // Type: OCSF_VALUE; EnumValue: 0;
	RESOURCE_ACTIVITY_SEVERITY_ID_INFORMATIONAL = 1; // Type: OCSF_VALUE; EnumValue: 1;
	RESOURCE_ACTIVITY_SEVERITY_ID_LOW = 2; // Type: OCSF_VALUE; EnumValue: 2;
	RESOURCE_ACTIVITY_SEVERITY_ID_MEDIUM = 3; // Type: OCSF_VALUE; EnumValue: 3;
	RESOURCE_ACTIVITY_SEVERITY_ID_HIGH = 4; // Type: OCSF_VALUE; EnumValue: 4;
	RESOURCE_ACTIVITY_SEVERITY_ID_CRITICAL = 5; // Type: OCSF_VALUE; EnumValue: 5;
	RESOURCE_ACTIVITY_SEVERITY_ID_FATAL = 6; // Type: OCSF_VALUE; EnumValue: 6;
	RESOURCE_ACTIVITY_SEVERITY_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum KERNEL_ACTIVITY_CATEGORY_UID {
	KERNEL_ACTIVITY_CATEGORY_UID_UNSPECIFIED = 0; // Type: NON_OCSF_VALUE;
	KERNEL_ACTIVITY_CATEGORY_UID_SYSTEM_ACTIVITY = 1; // EnumValue: 1; Type: OCSF_VALUE;
}

enum MEMORY_ACTIVITY_ACTIVITY_ID {
	MEMORY_ACTIVITY_ACTIVITY_ID_UNKNOWN = 0; // EnumValue: 0; Type: OCSF_VALUE;
	MEMORY_ACTIVITY_ACTIVITY_ID_ALLOCATE_PAGE = 1; // Type: OCSF_VALUE; EnumValue: 1;
	MEMORY_ACTIVITY_ACTIVITY_ID_MODIFY_PAGE = 2; // Type: OCSF_VALUE; EnumValue: 2;
	MEMORY_ACTIVITY_ACTIVITY_ID_DELETE_PAGE = 3; // EnumValue: 3; Type: OCSF_VALUE;
	MEMORY_ACTIVITY_ACTIVITY_ID_BUFFER_OVERFLOW = 4; // Type: OCSF_VALUE; EnumValue: 4;
	MEMORY_ACTIVITY_ACTIVITY_ID_DISABLE_DEP = 5; // Type: OCSF_VALUE; EnumValue: 5;
	MEMORY_ACTIVITY_ACTIVITY_ID_ENABLE_DEP = 6; // Type: OCSF_VALUE; EnumValue: 6;
	MEMORY_ACTIVITY_ACTIVITY_ID_READ = 7; // Type: OCSF_VALUE; EnumValue: 7;
	MEMORY_ACTIVITY_ACTIVITY_ID_WRITE = 8; // Type: OCSF_VALUE; EnumValue: 8;
	MEMORY_ACTIVITY_ACTIVITY_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum SCHEDULED_JOB_ACTIVITY_ACTIVITY_ID {
	SCHEDULED_JOB_ACTIVITY_ACTIVITY_ID_UNKNOWN = 0; // Type: OCSF_VALUE; EnumValue: 0;
	SCHEDULED_JOB_ACTIVITY_ACTIVITY_ID_CREATE = 1; // Type: OCSF_VALUE; EnumValue: 1;
	SCHEDULED_JOB_ACTIVITY_ACTIVITY_ID_UPDATE = 2; // Type: OCSF_VALUE; EnumValue: 2;
	SCHEDULED_JOB_ACTIVITY_ACTIVITY_ID_DELETE = 3; // Type: OCSF_VALUE; EnumValue: 3;
	SCHEDULED_JOB_ACTIVITY_ACTIVITY_ID_ENABLE = 4; // Type: OCSF_VALUE; EnumValue: 4;
	SCHEDULED_JOB_ACTIVITY_ACTIVITY_ID_DISABLE = 5; // Type: OCSF_VALUE; EnumValue: 5;
	SCHEDULED_JOB_ACTIVITY_ACTIVITY_ID_START = 6; // Type: OCSF_VALUE; EnumValue: 6;
	SCHEDULED_JOB_ACTIVITY_ACTIVITY_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum REGISTRY_VALUE_ACTIVITY_STATUS_ID {
	REGISTRY_VALUE_ACTIVITY_STATUS_ID_UNKNOWN = 0; // Type: OCSF_VALUE; EnumValue: 0;
	REGISTRY_VALUE_ACTIVITY_STATUS_ID_SUCCESS = 1; // Type: OCSF_VALUE; EnumValue: 1;
	REGISTRY_VALUE_ACTIVITY_STATUS_ID_FAILURE = 2; // Type: OCSF_VALUE; EnumValue: 2;
	REGISTRY_VALUE_ACTIVITY_STATUS_ID_OTHER = 99; // EnumValue: 99; Type: OCSF_VALUE;
}

enum PROCESS_ACTIVITY_ACTIVITY_ID {
	PROCESS_ACTIVITY_ACTIVITY_ID_UNKNOWN = 0; // Type: OCSF_VALUE; EnumValue: 0;
	PROCESS_ACTIVITY_ACTIVITY_ID_LAUNCH = 1; // Type: OCSF_VALUE; EnumValue: 1;
	PROCESS_ACTIVITY_ACTIVITY_ID_TERMINATE = 2; // Type: OCSF_VALUE; EnumValue: 2;
	PROCESS_ACTIVITY_ACTIVITY_ID_OPEN = 3; // Type: OCSF_VALUE; EnumValue: 3;
	PROCESS_ACTIVITY_ACTIVITY_ID_INJECT = 4; // Type: OCSF_VALUE; EnumValue: 4;
	PROCESS_ACTIVITY_ACTIVITY_ID_SET_USER_ID = 5; // Type: OCSF_VALUE; EnumValue: 5;
	PROCESS_ACTIVITY_ACTIVITY_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum FILE_ACTIVITY_SEVERITY_ID {
	FILE_ACTIVITY_SEVERITY_ID_UNKNOWN = 0; // Type: OCSF_VALUE; EnumValue: 0;
	FILE_ACTIVITY_SEVERITY_ID_INFORMATIONAL = 1; // Type: OCSF_VALUE; EnumValue: 1;
	FILE_ACTIVITY_SEVERITY_ID_LOW = 2; // Type: OCSF_VALUE; EnumValue: 2;
	FILE_ACTIVITY_SEVERITY_ID_MEDIUM = 3; // Type: OCSF_VALUE; EnumValue: 3;
	FILE_ACTIVITY_SEVERITY_ID_HIGH = 4; // Type: OCSF_VALUE; EnumValue: 4;
	FILE_ACTIVITY_SEVERITY_ID_CRITICAL = 5; // Type: OCSF_VALUE; EnumValue: 5;
	FILE_ACTIVITY_SEVERITY_ID_FATAL = 6; // Type: OCSF_VALUE; EnumValue: 6;
	FILE_ACTIVITY_SEVERITY_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum SYSTEM_STATUS_ID {
	SYSTEM_STATUS_ID_UNKNOWN = 0; // Type: OCSF_VALUE; EnumValue: 0;
	SYSTEM_STATUS_ID_SUCCESS = 1; // Type: OCSF_VALUE; EnumValue: 1;
	SYSTEM_STATUS_ID_FAILURE = 2; // Type: OCSF_VALUE; EnumValue: 2;
	SYSTEM_STATUS_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum REGISTRY_KEY_ACTIVITY_TYPE_UID {
	REGISTRY_KEY_ACTIVITY_TYPE_UID_UNSPECIFIED = 0; // Type: NON_OCSF_VALUE;
	REGISTRY_KEY_ACTIVITY_TYPE_UID_REGISTRY_KEY_ACTIVITY_CREATE = 100101; // Type: OCSF_VALUE; EnumValue: 100101;
	REGISTRY_KEY_ACTIVITY_TYPE_UID_REGISTRY_KEY_ACTIVITY_READ = 100102; // Type: OCSF_VALUE; EnumValue: 100102;
	REGISTRY_KEY_ACTIVITY_TYPE_UID_REGISTRY_KEY_ACTIVITY_MODIFY = 100103; // Type: OCSF_VALUE; EnumValue: 100103;
	REGISTRY_KEY_ACTIVITY_TYPE_UID_REGISTRY_KEY_ACTIVITY_DELETE = 100104; // Type: OCSF_VALUE; EnumValue: 100104;
	REGISTRY_KEY_ACTIVITY_TYPE_UID_REGISTRY_KEY_ACTIVITY_RENAME = 100105; // Type: OCSF_VALUE; EnumValue: 100105;
	REGISTRY_KEY_ACTIVITY_TYPE_UID_REGISTRY_KEY_ACTIVITY_SET_SECURITY = 100106; // Type: OCSF_VALUE; EnumValue: 100106;
	REGISTRY_KEY_ACTIVITY_TYPE_UID_REGISTRY_KEY_ACTIVITY_RESTORE = 100107; // Type: OCSF_VALUE; EnumValue: 100107;
	REGISTRY_KEY_ACTIVITY_TYPE_UID_REGISTRY_KEY_ACTIVITY_IMPORT = 100108; // Type: OCSF_VALUE; EnumValue: 100108;
	REGISTRY_KEY_ACTIVITY_TYPE_UID_REGISTRY_KEY_ACTIVITY_EXPORT = 100109; // Type: OCSF_VALUE; EnumValue: 100109;
}

enum PROCESS_ACTIVITY_STATUS_ID {
	PROCESS_ACTIVITY_STATUS_ID_UNKNOWN = 0; // Type: OCSF_VALUE; EnumValue: 0;
	PROCESS_ACTIVITY_STATUS_ID_SUCCESS = 1; // Type: OCSF_VALUE; EnumValue: 1;
	PROCESS_ACTIVITY_STATUS_ID_FAILURE = 2; // EnumValue: 2; Type: OCSF_VALUE;
	PROCESS_ACTIVITY_STATUS_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum PROCESS_ACTIVITY_CLASS_UID {
	PROCESS_ACTIVITY_CLASS_UID_UNSPECIFIED = 0; // Type: NON_OCSF_VALUE;
	PROCESS_ACTIVITY_CLASS_UID_PROCESS_ACTIVITY = 1007; // Type: OCSF_VALUE; EnumValue: 1007;
}

enum SYSTEM_TYPE_UID {
	SYSTEM_TYPE_UID_UNSPECIFIED = 0; // Type: NON_OCSF_VALUE;
	SYSTEM_TYPE_UID_SYSTEM_ACTIVITY_UNKNOWN = 100000; // Type: OCSF_VALUE; EnumValue: 100000;
	SYSTEM_TYPE_UID_SYSTEM_ACTIVITY_OTHER = 100099; // Type: OCSF_VALUE; EnumValue: 100099;
}

enum PROCESS_ACTIVITY_DISPOSITION_ID {
	PROCESS_ACTIVITY_DISPOSITION_ID_UNKNOWN = 0; // Type: OCSF_VALUE; EnumValue: 0;
	PROCESS_ACTIVITY_DISPOSITION_ID_ALLOWED = 1; // Type: OCSF_VALUE; EnumValue: 1;
	PROCESS_ACTIVITY_DISPOSITION_ID_BLOCKED = 2; // Type: OCSF_VALUE; EnumValue: 2;
	PROCESS_ACTIVITY_DISPOSITION_ID_QUARANTINED = 3; // Type: OCSF_VALUE; EnumValue: 3;
	PROCESS_ACTIVITY_DISPOSITION_ID_ISOLATED = 4; // Type: OCSF_VALUE; EnumValue: 4;
	PROCESS_ACTIVITY_DISPOSITION_ID_DELETED = 5; // Type: OCSF_VALUE; EnumValue: 5;
	PROCESS_ACTIVITY_DISPOSITION_ID_DROPPED = 6; // Type: OCSF_VALUE; EnumValue: 6;
	PROCESS_ACTIVITY_DISPOSITION_ID_CUSTOM_ACTION = 7; // Type: OCSF_VALUE; EnumValue: 7;
	PROCESS_ACTIVITY_DISPOSITION_ID_APPROVED = 8; // Type: OCSF_VALUE; EnumValue: 8;
	PROCESS_ACTIVITY_DISPOSITION_ID_RESTORED = 9; // Type: OCSF_VALUE; EnumValue: 9;
	PROCESS_ACTIVITY_DISPOSITION_ID_EXONERATED = 10; // EnumValue: 10; Type: OCSF_VALUE;
	PROCESS_ACTIVITY_DISPOSITION_ID_CORRECTED = 11; // Type: OCSF_VALUE; EnumValue: 11;
	PROCESS_ACTIVITY_DISPOSITION_ID_PARTIALLY_CORRECTED = 12; // Type: OCSF_VALUE; EnumValue: 12;
	PROCESS_ACTIVITY_DISPOSITION_ID_UNCORRECTED = 13; // EnumValue: 13; Type: OCSF_VALUE;
	PROCESS_ACTIVITY_DISPOSITION_ID_DELAYED = 14; // Type: OCSF_VALUE; EnumValue: 14;
	PROCESS_ACTIVITY_DISPOSITION_ID_DETECTED = 15; // Type: OCSF_VALUE; EnumValue: 15;
	PROCESS_ACTIVITY_DISPOSITION_ID_NO_ACTION = 16; // Type: OCSF_VALUE; EnumValue: 16;
	PROCESS_ACTIVITY_DISPOSITION_ID_LOGGED = 17; // Type: OCSF_VALUE; EnumValue: 17;
	PROCESS_ACTIVITY_DISPOSITION_ID_TAGGED = 18; // Type: OCSF_VALUE; EnumValue: 18;
	PROCESS_ACTIVITY_DISPOSITION_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum MODULE_ACTIVITY_CLASS_UID {
	MODULE_ACTIVITY_CLASS_UID_UNSPECIFIED = 0; // Type: NON_OCSF_VALUE;
	MODULE_ACTIVITY_CLASS_UID_MODULE_ACTIVITY = 1005; // Type: OCSF_VALUE; EnumValue: 1005;
}

enum MODULE_ACTIVITY_CATEGORY_UID {
	MODULE_ACTIVITY_CATEGORY_UID_UNSPECIFIED = 0; // Type: NON_OCSF_VALUE;
	MODULE_ACTIVITY_CATEGORY_UID_SYSTEM_ACTIVITY = 1; // Type: OCSF_VALUE; EnumValue: 1;
}

enum MODULE_ACTIVITY_DISPOSITION_ID {
	MODULE_ACTIVITY_DISPOSITION_ID_UNKNOWN = 0; // Type: OCSF_VALUE; EnumValue: 0;
	MODULE_ACTIVITY_DISPOSITION_ID_ALLOWED = 1; // Type: OCSF_VALUE; EnumValue: 1;
	MODULE_ACTIVITY_DISPOSITION_ID_BLOCKED = 2; // Type: OCSF_VALUE; EnumValue: 2;
	MODULE_ACTIVITY_DISPOSITION_ID_QUARANTINED = 3; // Type: OCSF_VALUE; EnumValue: 3;
	MODULE_ACTIVITY_DISPOSITION_ID_ISOLATED = 4; // Type: OCSF_VALUE; EnumValue: 4;
	MODULE_ACTIVITY_DISPOSITION_ID_DELETED = 5; // EnumValue: 5; Type: OCSF_VALUE;
	MODULE_ACTIVITY_DISPOSITION_ID_DROPPED = 6; // Type: OCSF_VALUE; EnumValue: 6;
	MODULE_ACTIVITY_DISPOSITION_ID_CUSTOM_ACTION = 7; // Type: OCSF_VALUE; EnumValue: 7;
	MODULE_ACTIVITY_DISPOSITION_ID_APPROVED = 8; // Type: OCSF_VALUE; EnumValue: 8;
	MODULE_ACTIVITY_DISPOSITION_ID_RESTORED = 9; // Type: OCSF_VALUE; EnumValue: 9;
	MODULE_ACTIVITY_DISPOSITION_ID_EXONERATED = 10; // Type: OCSF_VALUE; EnumValue: 10;
	MODULE_ACTIVITY_DISPOSITION_ID_CORRECTED = 11; // Type: OCSF_VALUE; EnumValue: 11;
	MODULE_ACTIVITY_DISPOSITION_ID_PARTIALLY_CORRECTED = 12; // EnumValue: 12; Type: OCSF_VALUE;
	MODULE_ACTIVITY_DISPOSITION_ID_UNCORRECTED = 13; // EnumValue: 13; Type: OCSF_VALUE;
	MODULE_ACTIVITY_DISPOSITION_ID_DELAYED = 14; // Type: OCSF_VALUE; EnumValue: 14;
	MODULE_ACTIVITY_DISPOSITION_ID_DETECTED = 15; // Type: OCSF_VALUE; EnumValue: 15;
	MODULE_ACTIVITY_DISPOSITION_ID_NO_ACTION = 16; // Type: OCSF_VALUE; EnumValue: 16;
	MODULE_ACTIVITY_DISPOSITION_ID_LOGGED = 17; // Type: OCSF_VALUE; EnumValue: 17;
	MODULE_ACTIVITY_DISPOSITION_ID_TAGGED = 18; // Type: OCSF_VALUE; EnumValue: 18;
	MODULE_ACTIVITY_DISPOSITION_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum MEMORY_ACTIVITY_SEVERITY_ID {
	MEMORY_ACTIVITY_SEVERITY_ID_UNKNOWN = 0; // Type: OCSF_VALUE; EnumValue: 0;
	MEMORY_ACTIVITY_SEVERITY_ID_INFORMATIONAL = 1; // Type: OCSF_VALUE; EnumValue: 1;
	MEMORY_ACTIVITY_SEVERITY_ID_LOW = 2; // Type: OCSF_VALUE; EnumValue: 2;
	MEMORY_ACTIVITY_SEVERITY_ID_MEDIUM = 3; // EnumValue: 3; Type: OCSF_VALUE;
	MEMORY_ACTIVITY_SEVERITY_ID_HIGH = 4; // Type: OCSF_VALUE; EnumValue: 4;
	MEMORY_ACTIVITY_SEVERITY_ID_CRITICAL = 5; // Type: OCSF_VALUE; EnumValue: 5;
	MEMORY_ACTIVITY_SEVERITY_ID_FATAL = 6; // Type: OCSF_VALUE; EnumValue: 6;
	MEMORY_ACTIVITY_SEVERITY_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum REGISTRY_KEY_ACTIVITY_STATUS_ID {
	REGISTRY_KEY_ACTIVITY_STATUS_ID_UNKNOWN = 0; // Type: OCSF_VALUE; EnumValue: 0;
	REGISTRY_KEY_ACTIVITY_STATUS_ID_SUCCESS = 1; // Type: OCSF_VALUE; EnumValue: 1;
	REGISTRY_KEY_ACTIVITY_STATUS_ID_FAILURE = 2; // EnumValue: 2; Type: OCSF_VALUE;
	REGISTRY_KEY_ACTIVITY_STATUS_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum MODULE_ACTIVITY_TYPE_UID {
	MODULE_ACTIVITY_TYPE_UID_UNSPECIFIED = 0; // Type: NON_OCSF_VALUE;
	MODULE_ACTIVITY_TYPE_UID_MODULE_ACTIVITY_UNKNOWN = 100500; // Type: OCSF_VALUE; EnumValue: 100500;
	MODULE_ACTIVITY_TYPE_UID_MODULE_ACTIVITY_LOAD = 100501; // EnumValue: 100501; Type: OCSF_VALUE;
	MODULE_ACTIVITY_TYPE_UID_MODULE_ACTIVITY_UNLOAD = 100502; // Type: OCSF_VALUE; EnumValue: 100502;
	MODULE_ACTIVITY_TYPE_UID_MODULE_ACTIVITY_OTHER = 100599; // Type: OCSF_VALUE; EnumValue: 100599;
}

enum KERNEL_ACTIVITY_TYPE_UID {
	KERNEL_ACTIVITY_TYPE_UID_UNSPECIFIED = 0; // Type: NON_OCSF_VALUE;
	KERNEL_ACTIVITY_TYPE_UID_KERNEL_ACTIVITY_UNKNOWN = 100300; // Type: OCSF_VALUE; EnumValue: 100300;
	KERNEL_ACTIVITY_TYPE_UID_KERNEL_ACTIVITY_CREATE = 100301; // Type: OCSF_VALUE; EnumValue: 100301;
	KERNEL_ACTIVITY_TYPE_UID_KERNEL_ACTIVITY_READ = 100302; // Type: OCSF_VALUE; EnumValue: 100302;
	KERNEL_ACTIVITY_TYPE_UID_KERNEL_ACTIVITY_DELETE = 100303; // Type: OCSF_VALUE; EnumValue: 100303;
	KERNEL_ACTIVITY_TYPE_UID_KERNEL_ACTIVITY_INVOKE = 100304; // Type: OCSF_VALUE; EnumValue: 100304;
	KERNEL_ACTIVITY_TYPE_UID_KERNEL_ACTIVITY_OTHER = 100399; // Type: OCSF_VALUE; EnumValue: 100399;
}

enum PROCESS_ACTIVITY_CATEGORY_UID {
	PROCESS_ACTIVITY_CATEGORY_UID_UNSPECIFIED = 0; // Type: NON_OCSF_VALUE;
	PROCESS_ACTIVITY_CATEGORY_UID_SYSTEM_ACTIVITY = 1; // Type: OCSF_VALUE; EnumValue: 1;
}

enum SCHEDULED_JOB_ACTIVITY_TYPE_UID {
	SCHEDULED_JOB_ACTIVITY_TYPE_UID_UNSPECIFIED = 0; // Type: NON_OCSF_VALUE;
	SCHEDULED_JOB_ACTIVITY_TYPE_UID_SCHEDULED_JOB_ACTIVITY_UNKNOWN = 100600; // Type: OCSF_VALUE; EnumValue: 100600;
	SCHEDULED_JOB_ACTIVITY_TYPE_UID_SCHEDULED_JOB_ACTIVITY_CREATE = 100601; // Type: OCSF_VALUE; EnumValue: 100601;
	SCHEDULED_JOB_ACTIVITY_TYPE_UID_SCHEDULED_JOB_ACTIVITY_UPDATE = 100602; // Type: OCSF_VALUE; EnumValue: 100602;
	SCHEDULED_JOB_ACTIVITY_TYPE_UID_SCHEDULED_JOB_ACTIVITY_DELETE = 100603; // Type: OCSF_VALUE; EnumValue: 100603;
	SCHEDULED_JOB_ACTIVITY_TYPE_UID_SCHEDULED_JOB_ACTIVITY_ENABLE = 100604; // Type: OCSF_VALUE; EnumValue: 100604;
	SCHEDULED_JOB_ACTIVITY_TYPE_UID_SCHEDULED_JOB_ACTIVITY_DISABLE = 100605; // EnumValue: 100605; Type: OCSF_VALUE;
	SCHEDULED_JOB_ACTIVITY_TYPE_UID_SCHEDULED_JOB_ACTIVITY_START = 100606; // Type: OCSF_VALUE; EnumValue: 100606;
	SCHEDULED_JOB_ACTIVITY_TYPE_UID_SCHEDULED_JOB_ACTIVITY_OTHER = 100699; // Type: OCSF_VALUE; EnumValue: 100699;
}

enum FILE_ACTIVITY_TYPE_UID {
	FILE_ACTIVITY_TYPE_UID_UNSPECIFIED = 0; // Type: NON_OCSF_VALUE;
	FILE_ACTIVITY_TYPE_UID_FILE_SYSTEM_ACTIVITY_UNKNOWN = 100100; // Type: OCSF_VALUE; EnumValue: 100100;
	FILE_ACTIVITY_TYPE_UID_FILE_SYSTEM_ACTIVITY_CREATE = 100101; // Type: OCSF_VALUE; EnumValue: 100101;
	FILE_ACTIVITY_TYPE_UID_FILE_SYSTEM_ACTIVITY_READ = 100102; // Type: OCSF_VALUE; EnumValue: 100102;
	FILE_ACTIVITY_TYPE_UID_FILE_SYSTEM_ACTIVITY_UPDATE = 100103; // Type: OCSF_VALUE; EnumValue: 100103;
	FILE_ACTIVITY_TYPE_UID_FILE_SYSTEM_ACTIVITY_DELETE = 100104; // Type: OCSF_VALUE; EnumValue: 100104;
	FILE_ACTIVITY_TYPE_UID_FILE_SYSTEM_ACTIVITY_RENAME = 100105; // Type: OCSF_VALUE; EnumValue: 100105;
	FILE_ACTIVITY_TYPE_UID_FILE_SYSTEM_ACTIVITY_SET_ATTRIBUTES = 100106; // Type: OCSF_VALUE; EnumValue: 100106;
	FILE_ACTIVITY_TYPE_UID_FILE_SYSTEM_ACTIVITY_SET_SECURITY = 100107; // Type: OCSF_VALUE; EnumValue: 100107;
	FILE_ACTIVITY_TYPE_UID_FILE_SYSTEM_ACTIVITY_GET_ATTRIBUTES = 100108; // Type: OCSF_VALUE; EnumValue: 100108;
	FILE_ACTIVITY_TYPE_UID_FILE_SYSTEM_ACTIVITY_GET_SECURITY = 100109; // Type: OCSF_VALUE; EnumValue: 100109;
	FILE_ACTIVITY_TYPE_UID_FILE_SYSTEM_ACTIVITY_ENCRYPT = 100110; // Type: OCSF_VALUE; EnumValue: 100110;
	FILE_ACTIVITY_TYPE_UID_FILE_SYSTEM_ACTIVITY_DECRYPT = 100111; // EnumValue: 100111; Type: OCSF_VALUE;
	FILE_ACTIVITY_TYPE_UID_FILE_SYSTEM_ACTIVITY_MOUNT = 100112; // Type: OCSF_VALUE; EnumValue: 100112;
	FILE_ACTIVITY_TYPE_UID_FILE_SYSTEM_ACTIVITY_UNMOUNT = 100113; // Type: OCSF_VALUE; EnumValue: 100113;
	FILE_ACTIVITY_TYPE_UID_FILE_SYSTEM_ACTIVITY_OPEN = 100114; // Type: OCSF_VALUE; EnumValue: 100114;
	FILE_ACTIVITY_TYPE_UID_FILE_SYSTEM_ACTIVITY_OTHER = 100199; // Type: OCSF_VALUE; EnumValue: 100199;
}

enum REGISTRY_KEY_ACTIVITY_ACTIVITY_ID {
	REGISTRY_KEY_ACTIVITY_ACTIVITY_ID_UNKNOWN = 0; // EnumValue: 0; Type: OCSF_VALUE;
	REGISTRY_KEY_ACTIVITY_ACTIVITY_ID_CREATE = 1; // Type: OCSF_VALUE; EnumValue: 1;
	REGISTRY_KEY_ACTIVITY_ACTIVITY_ID_READ = 2; // Type: OCSF_VALUE; EnumValue: 2;
	REGISTRY_KEY_ACTIVITY_ACTIVITY_ID_MODIFY = 3; // Type: OCSF_VALUE; EnumValue: 3;
	REGISTRY_KEY_ACTIVITY_ACTIVITY_ID_DELETE = 4; // Type: OCSF_VALUE; EnumValue: 4;
	REGISTRY_KEY_ACTIVITY_ACTIVITY_ID_RENAME = 5; // Type: OCSF_VALUE; EnumValue: 5;
	REGISTRY_KEY_ACTIVITY_ACTIVITY_ID_SET_SECURITY = 6; // Type: OCSF_VALUE; EnumValue: 6;
	REGISTRY_KEY_ACTIVITY_ACTIVITY_ID_RESTORE = 7; // Type: OCSF_VALUE; EnumValue: 7;
	REGISTRY_KEY_ACTIVITY_ACTIVITY_ID_IMPORT = 8; // Type: OCSF_VALUE; EnumValue: 8;
	REGISTRY_KEY_ACTIVITY_ACTIVITY_ID_EXPORT = 9; // Type: OCSF_VALUE; EnumValue: 9;
	REGISTRY_KEY_ACTIVITY_ACTIVITY_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum KERNEL_EXTENSION_ACTIVITY_ID {
	KERNEL_EXTENSION_ACTIVITY_ID_UNKNOWN = 0; // Type: OCSF_VALUE; EnumValue: 0;
	KERNEL_EXTENSION_ACTIVITY_ID_LOAD = 1; // Type: OCSF_VALUE; EnumValue: 1;
	KERNEL_EXTENSION_ACTIVITY_ID_UNLOAD = 2; // Type: OCSF_VALUE; EnumValue: 2;
	KERNEL_EXTENSION_ACTIVITY_ID_OTHER = 99; // Type: OCSF_VALUE; EnumValue: 99;
}

enum MEMORY_ACTIVITY_TYPE_UID {
	MEMORY_ACTIVITY_TYPE_UID_UNSPECIFIED = 0; // Type: NON_OCSF_VALUE;
	MEMORY_ACTIVITY_TYPE_UID_MEMORY_ACTIVITY_UNKNOWN = 100400; // Type: OCSF_VALUE; EnumValue: 100400;
	MEMORY_ACTIVITY_TYPE_UID_MEMORY_ACTIVITY_ALLOCATE_PAGE = 100401; // Type: OCSF_VALUE; EnumValue: 100401;
	MEMORY_ACTIVITY_TYPE_UID_MEMORY_ACTIVITY_MODIFY_PAGE = 100402; // Type: OCSF_VALUE; EnumValue: 100402;
	MEMORY_ACTIVITY_TYPE_UID_MEMORY_ACTIVITY_DELETE_PAGE = 100403; // Type: OCSF_VALUE; EnumValue: 100403;
	MEMORY_ACTIVITY_TYPE_UID_MEMORY_ACTIVITY_BUFFER_OVERFLOW = 100404; // EnumValue: 100404; Type: OCSF_VALUE;
	MEMORY_ACTIVITY_TYPE_UID_MEMORY_ACTIVITY_DISABLE_DEP = 100405; // Type: OCSF_VALUE; EnumValue: 100405;
	MEMORY_ACTIVITY_TYPE_UID_MEMORY_ACTIVITY_ENABLE_DEP = 100406; // EnumValue: 100406; Type: OCSF_VALUE;
	MEMORY_ACTIVITY_TYPE_UID_MEMORY_ACTIVITY_READ = 100407; // Type: OCSF_VALUE; EnumValue: 100407;
	MEMORY_ACTIVITY_TYPE_UID_MEMORY_ACTIVITY_WRITE = 100408; // EnumValue: 100408; Type: OCSF_VALUE;
	MEMORY_ACTIVITY_TYPE_UID_MEMORY_ACTIVITY_OTHER = 100499; // Type: OCSF_VALUE; EnumValue: 100499;
}