Custom category format

Custom category is a paramParams of special format:

    <category>
    |
    +---<uuid>
    +---<name>
    +---<descr>
    +---<inclusions>
    +---<exclusions>
    +---<type>
    +---<version>
    +---<CategoryType>
    +---<EnableAutoForceUpdate>
    +---<AutoForceUpdatePeriod>
    +---<SilverImageType>
    +---<SilverImageHosts>
    +---<CategoryFilter>
        |
        +---<FilesFromDir>
        +---<IncludeDll>
        +---<IncludeScripts>
        +---<MetadataFlag>
    

Attribute	Type	Description	Readonly
uuid	paramBinary	Globally unique category id. Used in KES policy.	Yes
name	wstring	Category name. Max length 256 symbols.
descr	wstring	Category description. Max length 256 symbols.
inclusions	array	Array of expressions
exclusions	array	Array of expressions
type	int	Category type for KES: 0 - COMMON 1 - BYFILESHASH	Yes
version	int	Category version	Yes
CategoryType	int	Category type 0 - Simple (Manually by user) 1 - AutoUpdate (From directory) 2 - SilverImage (Automatically by hashes from hosts)
EnableAutoForceUpdate	boolean	Enable auto force update. For AutoUpdate and SilverImage.
AutoForceUpdatePeriod	int	Update period in seconds
SilverImageType	int	Silver image type: 0 - All files 1 - Uncategorized
SilverImageHosts	array	Array of hosts ids (Host id in string format)
CategoryFilter	params	Category filter
FilesFromDir	wstring	Path to directory with files
IncludeDll	boolean	Include DLL files
IncludeScripts	boolean	Include Script files
MetadataFlag	int	Bit mask: 0x00000001 - File name 0x00000002 - File path 0x00000004 - Company name 0x00000001 - File name 0x00000008 - Product name 0x00000010 - File version 0x00000020 - Product version 0x00000040 - MD5 hash 0x00000080 - Local file name 0x00000100 - SHA256 hash

Inclusions (exclusions) is an array of expression of format:

    <expression>
    |
    +---<ex_type>
    // for types VendorName, ProductName, FileHash, FileName, FilePath
    +---<str>
    +---<str2>
    +---<str_op>
    |
    // for types ProductVersion, FileVersion
    +---<ver_major>
    +---<ver_minor>
    +---<ver_build>
    +---<ver_revision>
    +---<ver_suffix>
    +---<ver_raw>
    +---<ver_op>
    |
    // for type Linked
    +---<uuid>
    |
    // for type Media
    +---<media_type>
    |
    // for types AND, OR
    +---<l_expr>
    +---<r_expr>
    |
    // for type NOT
    +---<expr>
    |
    // for type Certificate
    +---<certificate>
        |
        +---<CertSerial>
        +---<CertThumbprint>
        +---<CertIssuer>
        +---<CertIssuerShort>
        +---<CertSubject>
        +---<CertSubjectShort>
        +---<CertValidFrom>
        +---<CertValidTo>
        +---<CertPublicKey>
    

Attribute	Type	Description
ex_type	int	Expression type: 0 - Unknown 1 - VendorName 2 - ProductName 3 - FileHash 4 - FileName 5 - FilePath 6 - ProductVersion 7 - FileVersion 8 - Linked 9 - And 10 - Or 11 - Not 12 - Media 13 - Certificate
str	wstring	String data
str2	wstring	Additional string data
str_op	int	String comparison operation: 0 - Equal 1 - NotEqual 2 - Like 3 - Contains 4 - StartsWith 5 - EndsWith
ver_major	int	Version major
ver_minor	int	Version minor
ver_build	int	Version build
ver_revision	int	Version revision
ver_suffix	wstring	Version suffix
ver_raw	wstring	Version raw
ver_op	int	Version comparison operation: 0 - Equal 1 - NotEqual 2 - Like 3 - Contains 4 - StartsWith 5 - EndsWith 6 - Greater 7 - GreaterOrEqual 8 - Less 9 - LessOrEqual
uuid	paramBinary	UUID of KL-category
media_type	int	Media type: 0 - Any 1 - RemovableDrive
l_expr	params	Left sub-expression
r_expr	params	Right sub-expression
expr	params	Sub-expression
certificate	params	Container with certificate attributes
CertSerial	paramBinary	Certificate serial number
CertThumbprint	paramBinary	Certificate thumbprint
CertIssuer	wstring	Certificate issuer attribute in full format
CertIssuerShort	wstring	Certificate issuer attribute in short format
CertSubject	wstring	Certificate subject attribute in full format
CertSubjectShort	wstring	Certificate subject attribute in short format
CertValidFrom	datetime	Certificate is valid from date
CertValidTo	datetime	Certificate is valid to date
CertPublicKey	paramBinary	Public key