{
  "rules": [
    {
      "name": "aix",
      "condition1": "os=aix",
      "use": "aix"
    },
    {
      "name": "cisco",
      "condition1": "os=cisco",
      "use": "cisco"
    },
    {
      "name": "dns",
      "condition1": "openports=53",
      "use": "dns"
    },
    {
      "name": "ftp",
      "condition1": "openports=21",
      "use": "ftp"
    },
    {
      "name": "HPAsm",
      "condition1": "macvendor=hewlett packard AND openports=2301",
      "use": "hp-asm"
    },
    {
      "name": "HPBladeChassis",
      "condition1": "os=embedded AND ostype=remote management AND osvendor=hp",
      "use": "hp-blade-chassis"
    },
    {
      "name": "HPPrinterState",
      "condition1": "openports=631 AND openports=9100",
      "use": "printer-hp"
    },
    {
      "name": "HpUx",
      "condition1": "os=hp-ux",
      "use": "hpux"
    },
    {
      "name": "Http",
      "condition1": "openports=80",
      "use": "http"
    },
    {
      "name": "Https",
      "condition1": "openports=443",
      "use": "https"
    },
    {
      "name": "Imap",
      "condition1": "openports=143",
      "use": "imap"
    },
    {
      "name": "Imaps",
      "condition1": "openports=993",
      "use": "imaps"
    },
    {
      "name": "Ldap",
      "condition1": "openports=389",
      "use": "ldap"
    },
    {
      "name": "Ldaps",
      "condition1": "openports=636",
      "use": "ldaps"
    },
    {
      "name": "linux",
      "condition1": "os=linux",
      "use": "linux"
    },
    {
      "name": "mongodb",
      "condition1": "openports=27017",
      "use": "mongodb"
    },
    {
      "name": "mssql",
      "condition1": "openports=1433",
      "use": "mssql"
    },
    {
      "name": "mysql",
      "condition1": "openports=3306",
      "use": "mysql"
    },
    {
      "name": "Oracle",
      "condition1": "openports=1521|1526",
      "use": "oracle"
    },
    {
      "name": "pop3",
      "condition1": "openports=110",
      "use": "pop3"
    },
    {
      "name": "pop3s",
      "condition1": "openports=995",
      "use": "pop3s"
    },
    {
      "name": "smtp",
      "condition1": "openports=25",
      "use": "smtp"
    },
    {
      "name": "smtps",
      "condition1": "openports=465",
      "use": "smtps"
    },
    {
      "name": "ssh",
      "condition1": "openports=22",
      "use": "ssh"
    },
    {
      "name": "switch",
      "condition1": "ostype=switch",
      "use": "switch"
    },
    {
      "name": "ESX",
      "condition1": "isesxhost=1",
      "use": "esx"
    },
    {
      "name": "VMware-VM",
      "condition1": "isesxvm=1",
      "use": "vmware-vm"
    },
    {
      "name": "Windows",
      "condition1": "os=windows",
      "use": "windows"
    },
    {
      "name": "Windows 2000",
      "condition1": "os=windows AND osversion=2000",
      "use": "windows2000"
    },
    {
      "name": "Windows 2003",
      "condition1": "os=windows AND osversion=2003",
      "use": "windows2003"
    },
    {
      "name": "Windows 2008",
      "condition1": "os=windows AND osversion=vista",
      "use": "windows2008"
    },
    {
      "name": "Windows 2008r2",
      "condition1": "os=windows AND osversion=7",
      "use": "windows2008,windows2008r2"
    },
    {
      "name": "Windows 2012",
      "condition1": "os=windows AND osversion=2012",
      "use": "windows2012"
    },
    {
      "name": "Windows 2016",
      "condition1": "os=windows AND osversion=2016",
      "use": "windows2016"
    }
  ]
}