@orkestrel/scaffold 0.0.46 → 0.0.47

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (34) hide show
  1. package/dist/bin/main.js +179 -44
  2. package/dist/bin/main.js.map +1 -1
  3. package/dist/host/AGENTS.md +1 -0
  4. package/dist/host/agents/orchestration.md +3 -1
  5. package/dist/host/claude/agents/codex.md +4 -4
  6. package/dist/host/claude/agents/orkestrel.md +4 -4
  7. package/dist/host/claude/rules/documentation.md +2 -1
  8. package/dist/host/claude/rules/quality.md +3 -0
  9. package/dist/host/claude/rules/tests.md +19 -0
  10. package/dist/host/claude/rules/workspace.md +28 -21
  11. package/dist/host/claude/settings.json +781 -2
  12. package/dist/host/configs/policy.ts +167 -10
  13. package/dist/host/dotfiles/oxlintrc.json +9 -0
  14. package/dist/host/guides/scaffold.md +143 -44
  15. package/dist/host/scripts/codex.sh +0 -0
  16. package/dist/host/scripts/cursor.sh +0 -0
  17. package/dist/host/scripts/deps.sh +0 -0
  18. package/dist/host/scripts/ollama.sh +0 -0
  19. package/dist/host/tests/config.test.ts +126 -11
  20. package/dist/host/tests/policy.test.ts +7 -0
  21. package/dist/host/tests/setupPolicy.ts +222 -8
  22. package/dist/src/core/index.cjs +420 -24
  23. package/dist/src/core/index.cjs.map +1 -1
  24. package/dist/src/core/index.d.cts +102 -9
  25. package/dist/src/core/index.d.ts +102 -9
  26. package/dist/src/core/index.js +416 -25
  27. package/dist/src/core/index.js.map +1 -1
  28. package/dist/src/server/index.cjs +41 -49
  29. package/dist/src/server/index.cjs.map +1 -1
  30. package/dist/src/server/index.d.cts +9 -8
  31. package/dist/src/server/index.d.ts +9 -8
  32. package/dist/src/server/index.js +42 -50
  33. package/dist/src/server/index.js.map +1 -1
  34. package/package.json +8 -6
package/dist/host/claude/settings.json CHANGED
@@ -5,19 +5,135 @@
5
5
  "defaultMode": "bypassPermissions",
6
6
  "allow": [
7
7
  "Bash(codex --version)",
8
+ "Bash(codex login)",
8
9
  "Bash(codex login *)",
9
10
  "Bash(codex login status)",
10
11
  "Bash(codex exec *)",
11
12
  "Bash(agent.cmd --version)",
13
+ "Bash(codex mcp-server)",
14
+ "Bash(agent --version)",
15
+ "Bash(agent -p *)",
16
+ "Bash(claude --version)",
17
+ "Bash(claude mcp serve)",
18
+ "Bash(claude mcp list)",
19
+ "Bash(ls)",
20
+ "Bash(ls *)",
21
+ "Bash(wc *)",
22
+ "Bash(head *)",
23
+ "Bash(tail *)",
24
+ "Bash(cat *)",
25
+ "Bash(find *)",
26
+ "Bash(grep *)",
27
+ "Bash(rg *)",
28
+ "Bash(sed -n *)",
29
+ "Bash(diff *)",
30
+ "Bash(stat *)",
31
+ "Bash(file *)",
32
+ "Bash(which *)",
33
+ "Bash(pwd)",
34
+ "Bash(printenv PATH)",
35
+ "Bash(printenv PWD)",
36
+ "Bash(printenv SHELL)",
37
+ "Bash(printenv USER)",
38
+ "Bash(printenv TMPDIR)",
39
+ "Bash(printenv TEMP)",
40
+ "Bash(printenv TMP)",
41
+ "Bash(printenv CI)",
42
+ "Bash(printenv TERM)",
43
+ "Bash(printenv LANG)",
44
+ "Bash(printenv LC_ALL)",
45
+ "Bash(du)",
46
+ "Bash(du *)",
47
+ "Bash(df)",
48
+ "Bash(df *)",
49
+ "Bash(ps)",
50
+ "Bash(ps *)",
51
+ "Bash(kill -0 *)",
52
+ "Bash(kill *)",
12
53
  "Bash(git status *)",
13
54
  "Bash(git log *)",
14
55
  "Bash(git show *)",
15
56
  "Bash(git diff *)",
57
+ "Bash(git status)",
58
+ "Bash(git log)",
59
+ "Bash(git show)",
60
+ "Bash(git diff)",
61
+ "Bash(git add *)",
62
+ "Bash(git commit *)",
63
+ "Bash(git push)",
64
+ "Bash(git fetch)",
65
+ "Bash(git fetch *)",
66
+ "Bash(git pull)",
67
+ "Bash(git pull *)",
68
+ "Bash(git merge *)",
69
+ "Bash(git revert *)",
70
+ "Bash(git branch)",
71
+ "Bash(git branch *)",
72
+ "Bash(git checkout -B *)",
73
+ "Bash(git switch *)",
74
+ "Bash(git switch -c *)",
75
+ "Bash(git rev-parse *)",
76
+ "Bash(git rev-list *)",
77
+ "Bash(git remote)",
78
+ "Bash(git remote *)",
79
+ "Bash(git ls-files)",
80
+ "Bash(git ls-files *)",
81
+ "Bash(git diff-tree *)",
82
+ "Bash(git describe)",
83
+ "Bash(git describe *)",
84
+ "Bash(git tag)",
85
+ "Bash(git tag -l)",
86
+ "Bash(git tag -l *)",
87
+ "Bash(git tag --list)",
88
+ "Bash(git tag --list *)",
89
+ "Bash(git worktree *)",
16
90
  "Bash(mkdir *)",
17
91
  "Bash(mkdir -p tmp/*)",
92
+ "Bash(rm -rf tmp/*)",
93
+ "Bash(chmod +x *)",
18
94
  "Read(//tmp/**)",
19
95
  "Bash(npm view *)",
20
96
  "Bash(npm ci)",
97
+ "Bash(npm login)",
98
+ "Bash(npm login *)",
99
+ "Bash(npm publish)",
100
+ "Bash(npm publish *)",
101
+ "Bash(npm ci *)",
102
+ "Bash(npm pkg get)",
103
+ "Bash(npm pkg get *)",
104
+ "Bash(npm pkg set)",
105
+ "Bash(npm pkg set *)",
106
+ "Bash(npm ls)",
107
+ "Bash(npm ls *)",
108
+ "Bash(npm whoami)",
109
+ "Bash(npm ping)",
110
+ "Bash(npm cache verify)",
111
+ "Bash(npm cache verify *)",
112
+ "Bash(npm i)",
113
+ "Bash(npm i *)",
114
+ "Bash(npm install)",
115
+ "Bash(npm install *)",
116
+ "Bash(npm uninstall *)",
117
+ "Bash(npm pack)",
118
+ "Bash(npm pack *)",
119
+ "Bash(npm view)",
120
+ "Bash(script -qfc *)",
121
+ "Bash(mkfifo *)",
122
+ "Bash(setsid *)",
123
+ "Bash(bash tmp/*)",
124
+ "Bash(bash scripts/*)",
125
+ "Bash(sh tmp/*)",
126
+ "Bash(sh scripts/*)",
127
+ "Bash(node tmp/*)",
128
+ "Bash(node scripts/*)",
129
+ "Bash(node --version)",
130
+ "Bash(node_modules/.bin/scaffold audit)",
131
+ "Bash(node_modules/.bin/scaffold *)",
132
+ "Bash(npx scaffold audit)",
133
+ "Bash(npx scaffold *)",
134
+ "Bash(npx oxfmt *)",
135
+ "Bash(npx oxlint *)",
136
+ "Bash(npx prettier --check *)",
21
137
  "Bash(node_modules/.bin/scaffold audit *)",
22
138
  "Bash(npx scaffold audit *)",
23
139
  "Bash(npx vitest run *)",
@@ -81,6 +197,48 @@
81
197
  "Bash(npm run build:app *)",
82
198
  "Bash(npm run build:app:browser)",
83
199
  "Bash(npm run build:app:browser *)",
200
+ "Bash(npm run prepublishOnly)",
201
+ "Bash(pwsh -NoProfile -Command Get-ChildItem)",
202
+ "Bash(pwsh -NoProfile -Command Get-ChildItem *)",
203
+ "Bash(pwsh -NoProfile -Command Get-Item *)",
204
+ "Bash(pwsh -NoProfile -Command Get-Content *)",
205
+ "Bash(pwsh -NoProfile -Command Get-Location)",
206
+ "Bash(pwsh -NoProfile -Command Get-Location *)",
207
+ "Bash(pwsh -NoProfile -Command Test-Path *)",
208
+ "Bash(pwsh -NoProfile -Command Select-String *)",
209
+ "Bash(pwsh -NoProfile -Command Get-Command)",
210
+ "Bash(pwsh -NoProfile -Command Get-Command *)",
211
+ "Bash(pwsh -NoProfile -Command Get-Process)",
212
+ "Bash(pwsh -NoProfile -Command Get-Process *)",
213
+ "Bash(pwsh -NoProfile -Command Measure-Object)",
214
+ "Bash(pwsh -NoProfile -Command Measure-Object *)",
215
+ "Bash(pwsh -NoProfile -Command Resolve-Path *)",
216
+ "Bash(pwsh -NoProfile -Command Get-FileHash *)",
217
+ "Bash(powershell -NoProfile -Command Get-ChildItem)",
218
+ "Bash(powershell -NoProfile -Command Get-ChildItem *)",
219
+ "Bash(powershell -NoProfile -Command Get-Item *)",
220
+ "Bash(powershell -NoProfile -Command Get-Content *)",
221
+ "Bash(powershell -NoProfile -Command Get-Location)",
222
+ "Bash(powershell -NoProfile -Command Get-Location *)",
223
+ "Bash(powershell -NoProfile -Command Test-Path *)",
224
+ "Bash(powershell -NoProfile -Command Select-String *)",
225
+ "Bash(powershell -NoProfile -Command Get-Command)",
226
+ "Bash(powershell -NoProfile -Command Get-Command *)",
227
+ "Bash(powershell -NoProfile -Command Get-Process)",
228
+ "Bash(powershell -NoProfile -Command Get-Process *)",
229
+ "Bash(powershell -NoProfile -Command Measure-Object)",
230
+ "Bash(powershell -NoProfile -Command Measure-Object *)",
231
+ "Bash(powershell -NoProfile -Command Resolve-Path *)",
232
+ "Bash(powershell -NoProfile -Command Get-FileHash *)",
233
+ "Bash(cmd /c dir)",
234
+ "Bash(cmd /c dir *)",
235
+ "Bash(cmd /c type *)",
236
+ "Bash(cmd /c findstr *)",
237
+ "Bash(cmd /c where *)",
238
+ "Bash(cmd /c ver)",
239
+ "Bash(cmd /c fc *)",
240
+ "Bash(cmd /c tree)",
241
+ "Bash(cmd /c tree *)",
84
242
  "mcp__codex__codex",
85
243
  "mcp__codex__codex-reply",
86
244
  "mcp__webstorm__read_file",
@@ -94,7 +252,8 @@
94
252
  "mcp__webstorm__get_all_open_file_paths",
95
253
  "mcp__webstorm__lint_files",
96
254
  "mcp__webstorm__git_status",
97
- "mcp__webstorm__list_directory_tree"
255
+ "mcp__webstorm__list_directory_tree",
256
+ "mcp__probe__prove"
98
257
  ],
99
258
  "deny": [
100
259
  "Read(.env*)",
@@ -183,7 +342,627 @@
183
342
  "Read(//**/.config/gh/**)",
184
343
  "Read(//**/.config/gcloud/**)",
185
344
  "Read(//**/.local/share/keyrings/**)",
186
- "Read(//**/*service-account*.json)"
345
+ "Read(//**/*service-account*.json)",
346
+ "Bash(cat .env*)",
347
+ "Bash(cat .npmrc*)",
348
+ "Bash(cat auth.json*)",
349
+ "Bash(cat .pypirc*)",
350
+ "Bash(cat .netrc*)",
351
+ "Bash(cat .git-credentials*)",
352
+ "Bash(cat credentials*)",
353
+ "Bash(cat application_default_credentials.json*)",
354
+ "Bash(cat id_rsa*)",
355
+ "Bash(cat id_ed25519*)",
356
+ "Bash(cat .ssh/*)",
357
+ "Bash(cat .aws/*)",
358
+ "Bash(cat .azure/*)",
359
+ "Bash(cat .kube/*)",
360
+ "Bash(cat .gnupg/*)",
361
+ "Bash(cat .docker/config.json*)",
362
+ "Bash(cat kubeconfig*)",
363
+ "Bash(cat .config/gh/*)",
364
+ "Bash(cat .config/gcloud/*)",
365
+ "Bash(cat .local/share/keyrings/*)",
366
+ "Bash(cat service-account*)",
367
+ "Bash(head .env*)",
368
+ "Bash(head .npmrc*)",
369
+ "Bash(head auth.json*)",
370
+ "Bash(head .pypirc*)",
371
+ "Bash(head .netrc*)",
372
+ "Bash(head .git-credentials*)",
373
+ "Bash(head credentials*)",
374
+ "Bash(head application_default_credentials.json*)",
375
+ "Bash(head id_rsa*)",
376
+ "Bash(head id_ed25519*)",
377
+ "Bash(head .ssh/*)",
378
+ "Bash(head .aws/*)",
379
+ "Bash(head .azure/*)",
380
+ "Bash(head .kube/*)",
381
+ "Bash(head .gnupg/*)",
382
+ "Bash(head .docker/config.json*)",
383
+ "Bash(head kubeconfig*)",
384
+ "Bash(head .config/gh/*)",
385
+ "Bash(head .config/gcloud/*)",
386
+ "Bash(head .local/share/keyrings/*)",
387
+ "Bash(head service-account*)",
388
+ "Bash(tail .env*)",
389
+ "Bash(tail .npmrc*)",
390
+ "Bash(tail auth.json*)",
391
+ "Bash(tail .pypirc*)",
392
+ "Bash(tail .netrc*)",
393
+ "Bash(tail .git-credentials*)",
394
+ "Bash(tail credentials*)",
395
+ "Bash(tail application_default_credentials.json*)",
396
+ "Bash(tail id_rsa*)",
397
+ "Bash(tail id_ed25519*)",
398
+ "Bash(tail .ssh/*)",
399
+ "Bash(tail .aws/*)",
400
+ "Bash(tail .azure/*)",
401
+ "Bash(tail .kube/*)",
402
+ "Bash(tail .gnupg/*)",
403
+ "Bash(tail .docker/config.json*)",
404
+ "Bash(tail kubeconfig*)",
405
+ "Bash(tail .config/gh/*)",
406
+ "Bash(tail .config/gcloud/*)",
407
+ "Bash(tail .local/share/keyrings/*)",
408
+ "Bash(tail service-account*)",
409
+ "Bash(less .env*)",
410
+ "Bash(less .npmrc*)",
411
+ "Bash(less auth.json*)",
412
+ "Bash(less .pypirc*)",
413
+ "Bash(less .netrc*)",
414
+ "Bash(less .git-credentials*)",
415
+ "Bash(less credentials*)",
416
+ "Bash(less application_default_credentials.json*)",
417
+ "Bash(less id_rsa*)",
418
+ "Bash(less id_ed25519*)",
419
+ "Bash(less .ssh/*)",
420
+ "Bash(less .aws/*)",
421
+ "Bash(less .azure/*)",
422
+ "Bash(less .kube/*)",
423
+ "Bash(less .gnupg/*)",
424
+ "Bash(less .docker/config.json*)",
425
+ "Bash(less kubeconfig*)",
426
+ "Bash(less .config/gh/*)",
427
+ "Bash(less .config/gcloud/*)",
428
+ "Bash(less .local/share/keyrings/*)",
429
+ "Bash(less service-account*)",
430
+ "Bash(more .env*)",
431
+ "Bash(more .npmrc*)",
432
+ "Bash(more auth.json*)",
433
+ "Bash(more .pypirc*)",
434
+ "Bash(more .netrc*)",
435
+ "Bash(more .git-credentials*)",
436
+ "Bash(more credentials*)",
437
+ "Bash(more application_default_credentials.json*)",
438
+ "Bash(more id_rsa*)",
439
+ "Bash(more id_ed25519*)",
440
+ "Bash(more .ssh/*)",
441
+ "Bash(more .aws/*)",
442
+ "Bash(more .azure/*)",
443
+ "Bash(more .kube/*)",
444
+ "Bash(more .gnupg/*)",
445
+ "Bash(more .docker/config.json*)",
446
+ "Bash(more kubeconfig*)",
447
+ "Bash(more .config/gh/*)",
448
+ "Bash(more .config/gcloud/*)",
449
+ "Bash(more .local/share/keyrings/*)",
450
+ "Bash(more service-account*)",
451
+ "Bash(grep -f .env*)",
452
+ "Bash(grep -f .npmrc*)",
453
+ "Bash(grep -f auth.json*)",
454
+ "Bash(grep -f .pypirc*)",
455
+ "Bash(grep -f .netrc*)",
456
+ "Bash(grep -f .git-credentials*)",
457
+ "Bash(grep -f credentials*)",
458
+ "Bash(grep -f application_default_credentials.json*)",
459
+ "Bash(grep -f id_rsa*)",
460
+ "Bash(grep -f id_ed25519*)",
461
+ "Bash(grep -f .ssh/*)",
462
+ "Bash(grep -f .aws/*)",
463
+ "Bash(grep -f .azure/*)",
464
+ "Bash(grep -f .kube/*)",
465
+ "Bash(grep -f .gnupg/*)",
466
+ "Bash(grep -f .docker/config.json*)",
467
+ "Bash(grep -f kubeconfig*)",
468
+ "Bash(grep -f .config/gh/*)",
469
+ "Bash(grep -f .config/gcloud/*)",
470
+ "Bash(grep -f .local/share/keyrings/*)",
471
+ "Bash(grep -f service-account*)",
472
+ "Bash(sed -n -f .env*)",
473
+ "Bash(sed -n -f .npmrc*)",
474
+ "Bash(sed -n -f auth.json*)",
475
+ "Bash(sed -n -f .pypirc*)",
476
+ "Bash(sed -n -f .netrc*)",
477
+ "Bash(sed -n -f .git-credentials*)",
478
+ "Bash(sed -n -f credentials*)",
479
+ "Bash(sed -n -f application_default_credentials.json*)",
480
+ "Bash(sed -n -f id_rsa*)",
481
+ "Bash(sed -n -f id_ed25519*)",
482
+ "Bash(sed -n -f .ssh/*)",
483
+ "Bash(sed -n -f .aws/*)",
484
+ "Bash(sed -n -f .azure/*)",
485
+ "Bash(sed -n -f .kube/*)",
486
+ "Bash(sed -n -f .gnupg/*)",
487
+ "Bash(sed -n -f .docker/config.json*)",
488
+ "Bash(sed -n -f kubeconfig*)",
489
+ "Bash(sed -n -f .config/gh/*)",
490
+ "Bash(sed -n -f .config/gcloud/*)",
491
+ "Bash(sed -n -f .local/share/keyrings/*)",
492
+ "Bash(sed -n -f service-account*)",
493
+ "Bash(awk -f .env*)",
494
+ "Bash(awk -f .npmrc*)",
495
+ "Bash(awk -f auth.json*)",
496
+ "Bash(awk -f .pypirc*)",
497
+ "Bash(awk -f .netrc*)",
498
+ "Bash(awk -f .git-credentials*)",
499
+ "Bash(awk -f credentials*)",
500
+ "Bash(awk -f application_default_credentials.json*)",
501
+ "Bash(awk -f id_rsa*)",
502
+ "Bash(awk -f id_ed25519*)",
503
+ "Bash(awk -f .ssh/*)",
504
+ "Bash(awk -f .aws/*)",
505
+ "Bash(awk -f .azure/*)",
506
+ "Bash(awk -f .kube/*)",
507
+ "Bash(awk -f .gnupg/*)",
508
+ "Bash(awk -f .docker/config.json*)",
509
+ "Bash(awk -f kubeconfig*)",
510
+ "Bash(awk -f .config/gh/*)",
511
+ "Bash(awk -f .config/gcloud/*)",
512
+ "Bash(awk -f .local/share/keyrings/*)",
513
+ "Bash(awk -f service-account*)",
514
+ "Bash(base64 .env*)",
515
+ "Bash(base64 .npmrc*)",
516
+ "Bash(base64 auth.json*)",
517
+ "Bash(base64 .pypirc*)",
518
+ "Bash(base64 .netrc*)",
519
+ "Bash(base64 .git-credentials*)",
520
+ "Bash(base64 credentials*)",
521
+ "Bash(base64 application_default_credentials.json*)",
522
+ "Bash(base64 id_rsa*)",
523
+ "Bash(base64 id_ed25519*)",
524
+ "Bash(base64 .ssh/*)",
525
+ "Bash(base64 .aws/*)",
526
+ "Bash(base64 .azure/*)",
527
+ "Bash(base64 .kube/*)",
528
+ "Bash(base64 .gnupg/*)",
529
+ "Bash(base64 .docker/config.json*)",
530
+ "Bash(base64 kubeconfig*)",
531
+ "Bash(base64 .config/gh/*)",
532
+ "Bash(base64 .config/gcloud/*)",
533
+ "Bash(base64 .local/share/keyrings/*)",
534
+ "Bash(base64 service-account*)",
535
+ "Bash(xxd .env*)",
536
+ "Bash(xxd .npmrc*)",
537
+ "Bash(xxd auth.json*)",
538
+ "Bash(xxd .pypirc*)",
539
+ "Bash(xxd .netrc*)",
540
+ "Bash(xxd .git-credentials*)",
541
+ "Bash(xxd credentials*)",
542
+ "Bash(xxd application_default_credentials.json*)",
543
+ "Bash(xxd id_rsa*)",
544
+ "Bash(xxd id_ed25519*)",
545
+ "Bash(xxd .ssh/*)",
546
+ "Bash(xxd .aws/*)",
547
+ "Bash(xxd .azure/*)",
548
+ "Bash(xxd .kube/*)",
549
+ "Bash(xxd .gnupg/*)",
550
+ "Bash(xxd .docker/config.json*)",
551
+ "Bash(xxd kubeconfig*)",
552
+ "Bash(xxd .config/gh/*)",
553
+ "Bash(xxd .config/gcloud/*)",
554
+ "Bash(xxd .local/share/keyrings/*)",
555
+ "Bash(xxd service-account*)",
556
+ "Bash(strings .env*)",
557
+ "Bash(strings .npmrc*)",
558
+ "Bash(strings auth.json*)",
559
+ "Bash(strings .pypirc*)",
560
+ "Bash(strings .netrc*)",
561
+ "Bash(strings .git-credentials*)",
562
+ "Bash(strings credentials*)",
563
+ "Bash(strings application_default_credentials.json*)",
564
+ "Bash(strings id_rsa*)",
565
+ "Bash(strings id_ed25519*)",
566
+ "Bash(strings .ssh/*)",
567
+ "Bash(strings .aws/*)",
568
+ "Bash(strings .azure/*)",
569
+ "Bash(strings .kube/*)",
570
+ "Bash(strings .gnupg/*)",
571
+ "Bash(strings .docker/config.json*)",
572
+ "Bash(strings kubeconfig*)",
573
+ "Bash(strings .config/gh/*)",
574
+ "Bash(strings .config/gcloud/*)",
575
+ "Bash(strings .local/share/keyrings/*)",
576
+ "Bash(strings service-account*)",
577
+ "Bash(pwsh -NoProfile -Command Get-Content .env*)",
578
+ "Bash(pwsh -NoProfile -Command Select-String -Path .env*)",
579
+ "Bash(pwsh -NoProfile -Command Get-Content .npmrc*)",
580
+ "Bash(pwsh -NoProfile -Command Select-String -Path .npmrc*)",
581
+ "Bash(pwsh -NoProfile -Command Get-Content auth.json*)",
582
+ "Bash(pwsh -NoProfile -Command Select-String -Path auth.json*)",
583
+ "Bash(pwsh -NoProfile -Command Get-Content .pypirc*)",
584
+ "Bash(pwsh -NoProfile -Command Select-String -Path .pypirc*)",
585
+ "Bash(pwsh -NoProfile -Command Get-Content .netrc*)",
586
+ "Bash(pwsh -NoProfile -Command Select-String -Path .netrc*)",
587
+ "Bash(pwsh -NoProfile -Command Get-Content .git-credentials*)",
588
+ "Bash(pwsh -NoProfile -Command Select-String -Path .git-credentials*)",
589
+ "Bash(pwsh -NoProfile -Command Get-Content credentials*)",
590
+ "Bash(pwsh -NoProfile -Command Select-String -Path credentials*)",
591
+ "Bash(pwsh -NoProfile -Command Get-Content application_default_credentials.json*)",
592
+ "Bash(pwsh -NoProfile -Command Select-String -Path application_default_credentials.json*)",
593
+ "Bash(pwsh -NoProfile -Command Get-Content id_rsa*)",
594
+ "Bash(pwsh -NoProfile -Command Select-String -Path id_rsa*)",
595
+ "Bash(pwsh -NoProfile -Command Get-Content id_ed25519*)",
596
+ "Bash(pwsh -NoProfile -Command Select-String -Path id_ed25519*)",
597
+ "Bash(pwsh -NoProfile -Command Get-Content .ssh/*)",
598
+ "Bash(pwsh -NoProfile -Command Select-String -Path .ssh/*)",
599
+ "Bash(pwsh -NoProfile -Command Get-Content .aws/*)",
600
+ "Bash(pwsh -NoProfile -Command Select-String -Path .aws/*)",
601
+ "Bash(pwsh -NoProfile -Command Get-Content .azure/*)",
602
+ "Bash(pwsh -NoProfile -Command Select-String -Path .azure/*)",
603
+ "Bash(pwsh -NoProfile -Command Get-Content .kube/*)",
604
+ "Bash(pwsh -NoProfile -Command Select-String -Path .kube/*)",
605
+ "Bash(pwsh -NoProfile -Command Get-Content .gnupg/*)",
606
+ "Bash(pwsh -NoProfile -Command Select-String -Path .gnupg/*)",
607
+ "Bash(pwsh -NoProfile -Command Get-Content .docker/config.json*)",
608
+ "Bash(pwsh -NoProfile -Command Select-String -Path .docker/config.json*)",
609
+ "Bash(pwsh -NoProfile -Command Get-Content kubeconfig*)",
610
+ "Bash(pwsh -NoProfile -Command Select-String -Path kubeconfig*)",
611
+ "Bash(pwsh -NoProfile -Command Get-Content .config/gh/*)",
612
+ "Bash(pwsh -NoProfile -Command Select-String -Path .config/gh/*)",
613
+ "Bash(pwsh -NoProfile -Command Get-Content .config/gcloud/*)",
614
+ "Bash(pwsh -NoProfile -Command Select-String -Path .config/gcloud/*)",
615
+ "Bash(pwsh -NoProfile -Command Get-Content .local/share/keyrings/*)",
616
+ "Bash(pwsh -NoProfile -Command Select-String -Path .local/share/keyrings/*)",
617
+ "Bash(pwsh -NoProfile -Command Get-Content service-account*)",
618
+ "Bash(pwsh -NoProfile -Command Select-String -Path service-account*)",
619
+ "Bash(pwsh -Command Get-Content .env*)",
620
+ "Bash(pwsh -Command Select-String -Path .env*)",
621
+ "Bash(pwsh -Command Get-Content .npmrc*)",
622
+ "Bash(pwsh -Command Select-String -Path .npmrc*)",
623
+ "Bash(pwsh -Command Get-Content auth.json*)",
624
+ "Bash(pwsh -Command Select-String -Path auth.json*)",
625
+ "Bash(pwsh -Command Get-Content .pypirc*)",
626
+ "Bash(pwsh -Command Select-String -Path .pypirc*)",
627
+ "Bash(pwsh -Command Get-Content .netrc*)",
628
+ "Bash(pwsh -Command Select-String -Path .netrc*)",
629
+ "Bash(pwsh -Command Get-Content .git-credentials*)",
630
+ "Bash(pwsh -Command Select-String -Path .git-credentials*)",
631
+ "Bash(pwsh -Command Get-Content credentials*)",
632
+ "Bash(pwsh -Command Select-String -Path credentials*)",
633
+ "Bash(pwsh -Command Get-Content application_default_credentials.json*)",
634
+ "Bash(pwsh -Command Select-String -Path application_default_credentials.json*)",
635
+ "Bash(pwsh -Command Get-Content id_rsa*)",
636
+ "Bash(pwsh -Command Select-String -Path id_rsa*)",
637
+ "Bash(pwsh -Command Get-Content id_ed25519*)",
638
+ "Bash(pwsh -Command Select-String -Path id_ed25519*)",
639
+ "Bash(pwsh -Command Get-Content .ssh/*)",
640
+ "Bash(pwsh -Command Select-String -Path .ssh/*)",
641
+ "Bash(pwsh -Command Get-Content .aws/*)",
642
+ "Bash(pwsh -Command Select-String -Path .aws/*)",
643
+ "Bash(pwsh -Command Get-Content .azure/*)",
644
+ "Bash(pwsh -Command Select-String -Path .azure/*)",
645
+ "Bash(pwsh -Command Get-Content .kube/*)",
646
+ "Bash(pwsh -Command Select-String -Path .kube/*)",
647
+ "Bash(pwsh -Command Get-Content .gnupg/*)",
648
+ "Bash(pwsh -Command Select-String -Path .gnupg/*)",
649
+ "Bash(pwsh -Command Get-Content .docker/config.json*)",
650
+ "Bash(pwsh -Command Select-String -Path .docker/config.json*)",
651
+ "Bash(pwsh -Command Get-Content kubeconfig*)",
652
+ "Bash(pwsh -Command Select-String -Path kubeconfig*)",
653
+ "Bash(pwsh -Command Get-Content .config/gh/*)",
654
+ "Bash(pwsh -Command Select-String -Path .config/gh/*)",
655
+ "Bash(pwsh -Command Get-Content .config/gcloud/*)",
656
+ "Bash(pwsh -Command Select-String -Path .config/gcloud/*)",
657
+ "Bash(pwsh -Command Get-Content .local/share/keyrings/*)",
658
+ "Bash(pwsh -Command Select-String -Path .local/share/keyrings/*)",
659
+ "Bash(pwsh -Command Get-Content service-account*)",
660
+ "Bash(pwsh -Command Select-String -Path service-account*)",
661
+ "Bash(powershell -NoProfile -Command Get-Content .env*)",
662
+ "Bash(powershell -NoProfile -Command Select-String -Path .env*)",
663
+ "Bash(powershell -NoProfile -Command Get-Content .npmrc*)",
664
+ "Bash(powershell -NoProfile -Command Select-String -Path .npmrc*)",
665
+ "Bash(powershell -NoProfile -Command Get-Content auth.json*)",
666
+ "Bash(powershell -NoProfile -Command Select-String -Path auth.json*)",
667
+ "Bash(powershell -NoProfile -Command Get-Content .pypirc*)",
668
+ "Bash(powershell -NoProfile -Command Select-String -Path .pypirc*)",
669
+ "Bash(powershell -NoProfile -Command Get-Content .netrc*)",
670
+ "Bash(powershell -NoProfile -Command Select-String -Path .netrc*)",
671
+ "Bash(powershell -NoProfile -Command Get-Content .git-credentials*)",
672
+ "Bash(powershell -NoProfile -Command Select-String -Path .git-credentials*)",
673
+ "Bash(powershell -NoProfile -Command Get-Content credentials*)",
674
+ "Bash(powershell -NoProfile -Command Select-String -Path credentials*)",
675
+ "Bash(powershell -NoProfile -Command Get-Content application_default_credentials.json*)",
676
+ "Bash(powershell -NoProfile -Command Select-String -Path application_default_credentials.json*)",
677
+ "Bash(powershell -NoProfile -Command Get-Content id_rsa*)",
678
+ "Bash(powershell -NoProfile -Command Select-String -Path id_rsa*)",
679
+ "Bash(powershell -NoProfile -Command Get-Content id_ed25519*)",
680
+ "Bash(powershell -NoProfile -Command Select-String -Path id_ed25519*)",
681
+ "Bash(powershell -NoProfile -Command Get-Content .ssh/*)",
682
+ "Bash(powershell -NoProfile -Command Select-String -Path .ssh/*)",
683
+ "Bash(powershell -NoProfile -Command Get-Content .aws/*)",
684
+ "Bash(powershell -NoProfile -Command Select-String -Path .aws/*)",
685
+ "Bash(powershell -NoProfile -Command Get-Content .azure/*)",
686
+ "Bash(powershell -NoProfile -Command Select-String -Path .azure/*)",
687
+ "Bash(powershell -NoProfile -Command Get-Content .kube/*)",
688
+ "Bash(powershell -NoProfile -Command Select-String -Path .kube/*)",
689
+ "Bash(powershell -NoProfile -Command Get-Content .gnupg/*)",
690
+ "Bash(powershell -NoProfile -Command Select-String -Path .gnupg/*)",
691
+ "Bash(powershell -NoProfile -Command Get-Content .docker/config.json*)",
692
+ "Bash(powershell -NoProfile -Command Select-String -Path .docker/config.json*)",
693
+ "Bash(powershell -NoProfile -Command Get-Content kubeconfig*)",
694
+ "Bash(powershell -NoProfile -Command Select-String -Path kubeconfig*)",
695
+ "Bash(powershell -NoProfile -Command Get-Content .config/gh/*)",
696
+ "Bash(powershell -NoProfile -Command Select-String -Path .config/gh/*)",
697
+ "Bash(powershell -NoProfile -Command Get-Content .config/gcloud/*)",
698
+ "Bash(powershell -NoProfile -Command Select-String -Path .config/gcloud/*)",
699
+ "Bash(powershell -NoProfile -Command Get-Content .local/share/keyrings/*)",
700
+ "Bash(powershell -NoProfile -Command Select-String -Path .local/share/keyrings/*)",
701
+ "Bash(powershell -NoProfile -Command Get-Content service-account*)",
702
+ "Bash(powershell -NoProfile -Command Select-String -Path service-account*)",
703
+ "Bash(powershell -Command Get-Content .env*)",
704
+ "Bash(powershell -Command Select-String -Path .env*)",
705
+ "Bash(powershell -Command Get-Content .npmrc*)",
706
+ "Bash(powershell -Command Select-String -Path .npmrc*)",
707
+ "Bash(powershell -Command Get-Content auth.json*)",
708
+ "Bash(powershell -Command Select-String -Path auth.json*)",
709
+ "Bash(powershell -Command Get-Content .pypirc*)",
710
+ "Bash(powershell -Command Select-String -Path .pypirc*)",
711
+ "Bash(powershell -Command Get-Content .netrc*)",
712
+ "Bash(powershell -Command Select-String -Path .netrc*)",
713
+ "Bash(powershell -Command Get-Content .git-credentials*)",
714
+ "Bash(powershell -Command Select-String -Path .git-credentials*)",
715
+ "Bash(powershell -Command Get-Content credentials*)",
716
+ "Bash(powershell -Command Select-String -Path credentials*)",
717
+ "Bash(powershell -Command Get-Content application_default_credentials.json*)",
718
+ "Bash(powershell -Command Select-String -Path application_default_credentials.json*)",
719
+ "Bash(powershell -Command Get-Content id_rsa*)",
720
+ "Bash(powershell -Command Select-String -Path id_rsa*)",
721
+ "Bash(powershell -Command Get-Content id_ed25519*)",
722
+ "Bash(powershell -Command Select-String -Path id_ed25519*)",
723
+ "Bash(powershell -Command Get-Content .ssh/*)",
724
+ "Bash(powershell -Command Select-String -Path .ssh/*)",
725
+ "Bash(powershell -Command Get-Content .aws/*)",
726
+ "Bash(powershell -Command Select-String -Path .aws/*)",
727
+ "Bash(powershell -Command Get-Content .azure/*)",
728
+ "Bash(powershell -Command Select-String -Path .azure/*)",
729
+ "Bash(powershell -Command Get-Content .kube/*)",
730
+ "Bash(powershell -Command Select-String -Path .kube/*)",
731
+ "Bash(powershell -Command Get-Content .gnupg/*)",
732
+ "Bash(powershell -Command Select-String -Path .gnupg/*)",
733
+ "Bash(powershell -Command Get-Content .docker/config.json*)",
734
+ "Bash(powershell -Command Select-String -Path .docker/config.json*)",
735
+ "Bash(powershell -Command Get-Content kubeconfig*)",
736
+ "Bash(powershell -Command Select-String -Path kubeconfig*)",
737
+ "Bash(powershell -Command Get-Content .config/gh/*)",
738
+ "Bash(powershell -Command Select-String -Path .config/gh/*)",
739
+ "Bash(powershell -Command Get-Content .config/gcloud/*)",
740
+ "Bash(powershell -Command Select-String -Path .config/gcloud/*)",
741
+ "Bash(powershell -Command Get-Content .local/share/keyrings/*)",
742
+ "Bash(powershell -Command Select-String -Path .local/share/keyrings/*)",
743
+ "Bash(powershell -Command Get-Content service-account*)",
744
+ "Bash(powershell -Command Select-String -Path service-account*)",
745
+ "Bash(cmd /c type .env*)",
746
+ "Bash(cmd /c findstr .env*)",
747
+ "Bash(cmd /c findstr /f:.env*)",
748
+ "Bash(cmd /c findstr /g:.env*)",
749
+ "Bash(cmd /c type .npmrc*)",
750
+ "Bash(cmd /c findstr .npmrc*)",
751
+ "Bash(cmd /c findstr /f:.npmrc*)",
752
+ "Bash(cmd /c findstr /g:.npmrc*)",
753
+ "Bash(cmd /c type auth.json*)",
754
+ "Bash(cmd /c findstr auth.json*)",
755
+ "Bash(cmd /c findstr /f:auth.json*)",
756
+ "Bash(cmd /c findstr /g:auth.json*)",
757
+ "Bash(cmd /c type .pypirc*)",
758
+ "Bash(cmd /c findstr .pypirc*)",
759
+ "Bash(cmd /c findstr /f:.pypirc*)",
760
+ "Bash(cmd /c findstr /g:.pypirc*)",
761
+ "Bash(cmd /c type .netrc*)",
762
+ "Bash(cmd /c findstr .netrc*)",
763
+ "Bash(cmd /c findstr /f:.netrc*)",
764
+ "Bash(cmd /c findstr /g:.netrc*)",
765
+ "Bash(cmd /c type .git-credentials*)",
766
+ "Bash(cmd /c findstr .git-credentials*)",
767
+ "Bash(cmd /c findstr /f:.git-credentials*)",
768
+ "Bash(cmd /c findstr /g:.git-credentials*)",
769
+ "Bash(cmd /c type credentials*)",
770
+ "Bash(cmd /c findstr credentials*)",
771
+ "Bash(cmd /c findstr /f:credentials*)",
772
+ "Bash(cmd /c findstr /g:credentials*)",
773
+ "Bash(cmd /c type application_default_credentials.json*)",
774
+ "Bash(cmd /c findstr application_default_credentials.json*)",
775
+ "Bash(cmd /c findstr /f:application_default_credentials.json*)",
776
+ "Bash(cmd /c findstr /g:application_default_credentials.json*)",
777
+ "Bash(cmd /c type id_rsa*)",
778
+ "Bash(cmd /c findstr id_rsa*)",
779
+ "Bash(cmd /c findstr /f:id_rsa*)",
780
+ "Bash(cmd /c findstr /g:id_rsa*)",
781
+ "Bash(cmd /c type id_ed25519*)",
782
+ "Bash(cmd /c findstr id_ed25519*)",
783
+ "Bash(cmd /c findstr /f:id_ed25519*)",
784
+ "Bash(cmd /c findstr /g:id_ed25519*)",
785
+ "Bash(cmd /c type .ssh\\*)",
786
+ "Bash(cmd /c findstr .ssh\\*)",
787
+ "Bash(cmd /c findstr /f:.ssh\\*)",
788
+ "Bash(cmd /c findstr /g:.ssh\\*)",
789
+ "Bash(cmd /c type .aws\\*)",
790
+ "Bash(cmd /c findstr .aws\\*)",
791
+ "Bash(cmd /c findstr /f:.aws\\*)",
792
+ "Bash(cmd /c findstr /g:.aws\\*)",
793
+ "Bash(cmd /c type .azure\\*)",
794
+ "Bash(cmd /c findstr .azure\\*)",
795
+ "Bash(cmd /c findstr /f:.azure\\*)",
796
+ "Bash(cmd /c findstr /g:.azure\\*)",
797
+ "Bash(cmd /c type .kube\\*)",
798
+ "Bash(cmd /c findstr .kube\\*)",
799
+ "Bash(cmd /c findstr /f:.kube\\*)",
800
+ "Bash(cmd /c findstr /g:.kube\\*)",
801
+ "Bash(cmd /c type .gnupg\\*)",
802
+ "Bash(cmd /c findstr .gnupg\\*)",
803
+ "Bash(cmd /c findstr /f:.gnupg\\*)",
804
+ "Bash(cmd /c findstr /g:.gnupg\\*)",
805
+ "Bash(cmd /c type .docker\\config.json*)",
806
+ "Bash(cmd /c findstr .docker\\config.json*)",
807
+ "Bash(cmd /c findstr /f:.docker\\config.json*)",
808
+ "Bash(cmd /c findstr /g:.docker\\config.json*)",
809
+ "Bash(cmd /c type kubeconfig*)",
810
+ "Bash(cmd /c findstr kubeconfig*)",
811
+ "Bash(cmd /c findstr /f:kubeconfig*)",
812
+ "Bash(cmd /c findstr /g:kubeconfig*)",
813
+ "Bash(cmd /c type .config\\gh\\*)",
814
+ "Bash(cmd /c findstr .config\\gh\\*)",
815
+ "Bash(cmd /c findstr /f:.config\\gh\\*)",
816
+ "Bash(cmd /c findstr /g:.config\\gh\\*)",
817
+ "Bash(cmd /c type .config\\gcloud\\*)",
818
+ "Bash(cmd /c findstr .config\\gcloud\\*)",
819
+ "Bash(cmd /c findstr /f:.config\\gcloud\\*)",
820
+ "Bash(cmd /c findstr /g:.config\\gcloud\\*)",
821
+ "Bash(cmd /c type .local\\share\\keyrings\\*)",
822
+ "Bash(cmd /c findstr .local\\share\\keyrings\\*)",
823
+ "Bash(cmd /c findstr /f:.local\\share\\keyrings\\*)",
824
+ "Bash(cmd /c findstr /g:.local\\share\\keyrings\\*)",
825
+ "Bash(cmd /c type service-account*)",
826
+ "Bash(cmd /c findstr service-account*)",
827
+ "Bash(cmd /c findstr /f:service-account*)",
828
+ "Bash(cmd /c findstr /g:service-account*)",
829
+ "Bash(rm -rf /)",
830
+ "Bash(rm -rf /*)",
831
+ "Bash(rm -rf ~)",
832
+ "Bash(rm -rf ~/*)",
833
+ "Bash(rm -rf .)",
834
+ "Bash(rm -rf ./*)",
835
+ "Bash(rm -rf ..)",
836
+ "Bash(rm -rf ../*)",
837
+ "Bash(shred *)",
838
+ "Bash(mkfs *)",
839
+ "Bash(mkfs.*)",
840
+ "Bash(dd if=*)",
841
+ "Bash(chmod -R 777 *)",
842
+ "Bash(chown -R *)",
843
+ "Bash(truncate -s 0 /)",
844
+ "Bash(truncate -s 0 /*)",
845
+ "Bash(sudo)",
846
+ "Bash(sudo *)",
847
+ "Bash(su)",
848
+ "Bash(su *)",
849
+ "Bash(systemctl stop *)",
850
+ "Bash(systemctl disable *)",
851
+ "Bash(shutdown)",
852
+ "Bash(shutdown *)",
853
+ "Bash(reboot)",
854
+ "Bash(reboot *)",
855
+ "Bash(halt)",
856
+ "Bash(halt *)",
857
+ "Bash(kill -9 -1)",
858
+ "Bash(pkill -f *)",
859
+ "Bash(wget)",
860
+ "Bash(wget *)",
861
+ "Bash(nc -e *)",
862
+ "Bash(ssh)",
863
+ "Bash(ssh *)",
864
+ "Bash(scp)",
865
+ "Bash(scp *)",
866
+ "Bash(rsync --delete *)",
867
+ "Bash(git reset --hard)",
868
+ "Bash(git reset --hard *)",
869
+ "Bash(git clean)",
870
+ "Bash(git clean *)",
871
+ "Bash(git restore *)",
872
+ "Bash(git stash drop)",
873
+ "Bash(git stash drop *)",
874
+ "Bash(git stash clear)",
875
+ "Bash(git checkout -- *)",
876
+ "Bash(git push --force)",
877
+ "Bash(git push --force *)",
878
+ "Bash(git push -f)",
879
+ "Bash(git push -f *)",
880
+ "Bash(git filter-branch *)",
881
+ "Bash(git reflog expire *)",
882
+ "Bash(git branch -D *)",
883
+ "Bash(git branch -f *)",
884
+ "Bash(npm config set *)",
885
+ "Bash(npm config delete *)",
886
+ "Bash(npm config set)",
887
+ "Bash(npm config delete)",
888
+ "Bash(npm token)",
889
+ "Bash(npm token *)",
890
+ "Bash(npm deprecate)",
891
+ "Bash(npm deprecate *)",
892
+ "Bash(npm unpublish)",
893
+ "Bash(npm unpublish *)",
894
+ "Bash(npm owner)",
895
+ "Bash(npm owner *)",
896
+ "Bash(npm access)",
897
+ "Bash(npm access *)",
898
+ "Bash(pwsh -NoProfile -Command Remove-Item *)",
899
+ "Bash(pwsh -NoProfile -Command Set-ExecutionPolicy *)",
900
+ "Bash(pwsh -NoProfile -Command Invoke-Expression *)",
901
+ "Bash(pwsh -NoProfile -Command iex *)",
902
+ "Bash(pwsh -NoProfile -Command Invoke-WebRequest *)",
903
+ "Bash(pwsh -NoProfile -Command Stop-Computer*)",
904
+ "Bash(pwsh -NoProfile -Command Restart-Computer*)",
905
+ "Bash(pwsh -NoProfile -Command Remove-PSDrive *)",
906
+ "Bash(pwsh -NoProfile -Command Clear-Content *)",
907
+ "Bash(pwsh -NoProfile -Command Set-ItemProperty HKLM:*)",
908
+ "Bash(pwsh -NoProfile -Command Set-ItemProperty HKCU:*)",
909
+ "Bash(pwsh -NoProfile -Command Set-ItemProperty Registry::*)",
910
+ "Bash(pwsh -Command Remove-Item *)",
911
+ "Bash(pwsh -Command Set-ExecutionPolicy *)",
912
+ "Bash(pwsh -Command Invoke-Expression *)",
913
+ "Bash(pwsh -Command iex *)",
914
+ "Bash(pwsh -Command Invoke-WebRequest *)",
915
+ "Bash(pwsh -Command Stop-Computer*)",
916
+ "Bash(pwsh -Command Restart-Computer*)",
917
+ "Bash(pwsh -Command Remove-PSDrive *)",
918
+ "Bash(pwsh -Command Clear-Content *)",
919
+ "Bash(pwsh -Command Set-ItemProperty HKLM:*)",
920
+ "Bash(pwsh -Command Set-ItemProperty HKCU:*)",
921
+ "Bash(pwsh -Command Set-ItemProperty Registry::*)",
922
+ "Bash(powershell -NoProfile -Command Remove-Item *)",
923
+ "Bash(powershell -NoProfile -Command Set-ExecutionPolicy *)",
924
+ "Bash(powershell -NoProfile -Command Invoke-Expression *)",
925
+ "Bash(powershell -NoProfile -Command iex *)",
926
+ "Bash(powershell -NoProfile -Command Invoke-WebRequest *)",
927
+ "Bash(powershell -NoProfile -Command Stop-Computer*)",
928
+ "Bash(powershell -NoProfile -Command Restart-Computer*)",
929
+ "Bash(powershell -NoProfile -Command Remove-PSDrive *)",
930
+ "Bash(powershell -NoProfile -Command Clear-Content *)",
931
+ "Bash(powershell -NoProfile -Command Set-ItemProperty HKLM:*)",
932
+ "Bash(powershell -NoProfile -Command Set-ItemProperty HKCU:*)",
933
+ "Bash(powershell -NoProfile -Command Set-ItemProperty Registry::*)",
934
+ "Bash(powershell -Command Remove-Item *)",
935
+ "Bash(powershell -Command Set-ExecutionPolicy *)",
936
+ "Bash(powershell -Command Invoke-Expression *)",
937
+ "Bash(powershell -Command iex *)",
938
+ "Bash(powershell -Command Invoke-WebRequest *)",
939
+ "Bash(powershell -Command Stop-Computer*)",
940
+ "Bash(powershell -Command Restart-Computer*)",
941
+ "Bash(powershell -Command Remove-PSDrive *)",
942
+ "Bash(powershell -Command Clear-Content *)",
943
+ "Bash(powershell -Command Set-ItemProperty HKLM:*)",
944
+ "Bash(powershell -Command Set-ItemProperty HKCU:*)",
945
+ "Bash(powershell -Command Set-ItemProperty Registry::*)",
946
+ "Bash(reg delete *)",
947
+ "Bash(cmd /c reg delete *)",
948
+ "Bash(cmd /c del /s *)",
949
+ "Bash(cmd /c del /q *)",
950
+ "Bash(cmd /c rmdir /s *)",
951
+ "Bash(cmd /c format *)",
952
+ "Bash(schtasks /create *)",
953
+ "Bash(cmd /c schtasks /create *)",
954
+ "Bash(netsh)",
955
+ "Bash(netsh *)",
956
+ "Bash(cmd /c netsh)",
957
+ "Bash(cmd /c netsh *)",
958
+ "Bash(wmic)",
959
+ "Bash(wmic *)",
960
+ "Bash(cmd /c wmic)",
961
+ "Bash(cmd /c wmic *)",
962
+ "Bash(bcdedit *)",
963
+ "Bash(cmd /c bcdedit *)",
964
+ "Bash(vssadmin delete *)",
965
+ "Bash(cmd /c vssadmin delete *)"
187
966
  ]
188
967
  },
189
968
  "hooks": {