[
  {
    "id": 0,
    "name": ["Работа"],
    "rule": { "type": "none" },
    "data": {}
  },
  {
    "id": 1,
    "name": ["Работа", "1С"],
    "rule": {
      "type": "regex",
      "regex": "\\b(1cv8s?|1cv8c|1cestart)\\.exe\\b|1С:Предприятие|Запуск 1С:Предприятия|Загрузка конфигурационной информации|Доступ к информационной базе",
      "ignore_case": true
    },
    "data": { "color": "#194D33" }
  },
  {
    "id": 2,
    "name": ["Работа", "Документы"],
    "rule": {
      "type": "regex",
      "regex": "\\b(winword|excel|powerpnt|outlook|acrord32|acrord64|libreoffice|writer|calc)\\.exe\\b|LibreOffice|OnlyOffice|Adobe Reader|Acrobat",
      "ignore_case": true
    },
    "data": { "color": "#2E7D32" }
  },
  {
    "id": 3,
    "name": ["Работа", "Коммуникации"],
    "rule": {
      "type": "regex",
      "regex": "\\b(teams|telegram|slack|thunderbird|zoom|skype|whatsapp|viber|discord)\\.exe\\b|Mattermost|Element|Riot",
      "ignore_case": true
    },
    "data": { "color": "#1E88E5" }
  },
  {
    "id": 4,
    "name": ["Работа", "Администрирование"],
    "rule": {
      "type": "regex",
      "regex": "\\b(mstsc|putty|kitty|winscp|anydesk|teamviewer|vncviewer|mmc|regedit|services|control|powershell|cmd|gnome-terminal|gnome-terminal-server|xfce4-terminal|konsole|tilix|alacritty|xterm|remmina|virt-manager)\\.exe\\b|\\b(gnome-terminal|gnome-terminal-server|xfce4-terminal|konsole|tilix|alacritty|xterm|remmina|virt-manager)\\b|Proxmox Virtual Environment|\\bpfSense\\b|\\bGrafana\\b|\\bKibana\\b|\\bPortainer\\b",
      "ignore_case": true
    },
    "data": { "color": "#6D4C41" }
  },
  {
    "id": 5,
    "name": ["Интернет"],
    "rule": { "type": "none" },
    "data": {}
  },
  {
    "id": 6,
    "name": ["Интернет", "Браузер"],
    "rule": {
      "type": "regex",
      "regex": "\\b(chrome|msedge|firefox|opera|brave|vivaldi|browser|chromium)\\.exe\\b|\\b(chrome|chromium|firefox|opera|brave|vivaldi)\\b",
      "ignore_case": true
    },
    "data": { "color": "#00897B" }
  },
  {
    "id": 7,
    "name": ["Система"],
    "rule": { "type": "none" },
    "data": {}
  },
  {
    "id": 8,
    "name": ["Система", "Windows"],
    "rule": {
      "type": "regex",
      "regex": "\\b(SearchHost|explorer|ShellExperienceHost|ApplicationFrameHost|RuntimeBroker|sihost|dwm|svchost|fontdrvhost|userinit)\\.exe\\b|\\\\Windows\\\\System32",
      "ignore_case": true
    },
    "data": { "color": "#607D8B" }
  },
  {
    "id": 9,
    "name": ["ActivityWatch"],
    "rule": {
      "type": "regex",
      "regex": "ActivityWatch|\\baw-(watcher|qt)\\.exe\\b|\\baw-(watcher|qt)\\b",
      "ignore_case": true
    },
    "data": {}
  }
]