;Resources
KLRoot                      = 'All resources'
KLSystemData                = 'Operating system'
KLPrivateData               = 'Personal data'
KLPublicData                = 'Public data'
KLStartupRegKeys            = 'Startup settings'
KLInternetSecRegKeys        = 'Online Security'
KLPrivateUserFiles          = 'User files'
KLSystemFiles               = 'System files'
KLSystemSecRegKeys          = 'Security settings'
KLSystemServicesRegKeys     = 'System services'
KLCriticalParams			= 'Critical settings'
KLStartUpFolders            = 'Autorun folders'
KLIESettingsRegKeys         = 'Microsoft Internet Explorer settings'
KLIEPlugInsRegKeys          = 'Microsoft Internet Explorer plug-ins'
KLExplorerSettingsRegKeys   = 'Windows Explorer settings'
KLNetwork                   = 'Networks'
KLTrusted                   = 'Trusted networks'
KLLocal                     = 'Local networks'
KLPublic                    = 'Public networks'
KLPrivileges                = 'Rights'
KLPermissionShell           = 'Runtime environment modification'
KLPermissionAppAccess       = 'Access to other processes'
KLPermissionSystem          = 'Operating system modification'
KLPermissionProcManage      = 'Process control'
KLPermissionProcEmbed       = 'Intrusion into other processes'
KLPermissionSysObjAccess    = 'Access to operating system objects'
KLPermissionStrange         = 'Suspicious modifications in the operating system'
KLPermissionMemoryAccess    = 'Memory access'
KLPermissionPrivileges      = 'Edit permissions'
KLPermissionHiddenNetAct    = 'Hidden network access'
KLStartProc                 = 'Start other processes'
KLStopProc                  = 'Stop other processes'
KLSuspend                   = 'Pause other processes'
KLSuspProcessInteraction	= 'Perform suspicious operations'
KLSchedulerStart            = 'Start scheduler'
KLWMSend                    = 'Send Windows messages to other processes'
KLSetHook                   = 'Install hooks'
KLCodeInject                = 'Perform code injection'
KLAttachThreadInput         = 'Hook incoming messages of the stream'
KLDrvStart                  = 'Start drivers'
KLOlePortAccess             = 'Use other applications\' APIs'
KLCreateKnownDlls           = 'Change system modules (KnownDlls)'
KLKeyLogger                 = 'Keylogger activity'
KLScreenshots               = 'Capture screenshots'
KLSelfStart                 = 'Start'
KLLLDiskAccess              = 'Perform low-level access to disk'
KLLLFSAccess                = 'Perform low-level access to file system'
KLCriticalCOMAccess         = 'Access critical system objects'
KLCreateRegHiddKey          = 'Create hidden registry keys'
KLSetHardLink               = 'Create hard link to a file'
KLDirectMemAccess           = 'Directly access physical memory'
KLReadProcMem               = 'Read memory of other processes'
KLSetDbgPrivilege           = 'Set debug privileges'
KLChangeObjPrivilege        = 'Change object access rights'
KLUseBrowserCL              = 'Use browser command line'
KLUseBrowserAPI             = 'Use browser program interfaces'
KLUseDNS                    = 'Use system program interfaces (DNS)'
KLUseBITS                   = 'Use system program interfaces'
KLWindowsShutDown           = 'Shut down Microsoft Windows'
KLSaveRegKey                = 'Save registry keys to file'
KLPrtStgAccess              = 'Access password storage'
KLWebServices               = 'Network services'
KLIPRanges                  = 'Network addresses'
KLShellWindowsAcceess       = 'Access internal browser data'
KLUserAccountAccess         = 'Access user account settings'
KLOtherSoft                 = 'Program settings'
KLInternetBrowsers          = 'Browsers'
KLFileBrowsers              = 'File managers'
KLMail                      = 'Email clients'
KLMessengers                = 'IM clients'
KLDownloadManagers          = 'Download managers'
KLFTPManagers               = 'FTP managers'
KLOnLineMoney               = 'Electronic purses'
KLProtected_applications    = 'Protected applications'
KLDuplicateHandle           = 'Duplicate internal process handle'
KLWinSpool                  = 'Manage printer drivers'
KLDeleteService             = 'Delete service'
KLStartService              = 'Start service'
KLControlService            = 'Manage service'
KLChangeServiceConfig       = 'Modify service configuration'
KLOpenService               = 'Open service for write'
KLReadOpenService           = 'Open service for read'
KLCreateService             = 'Create service'
Antiviruses					= 'Anti-virus software'
KLVMOperation				= 'Modify memory of other processes'
EmptyResource               = 'Unknown'

;ObjectTypes
ObjectTypeFile              = 'file'
ObjectTypeDirectory         = 'folder'
ObjectTypeRegKey            = 'registry key'
ObjectTypeRegValue          = 'registry key value'
ObjectTypeProcess           = 'process'
ObjectTypeThread            = 'flow'
ObjectTypeModule            = 'module'
ObjectTypeLogSector         = 'sector of logical disk'
ObjectTypePhysSector        = 'sector of physical disk'
ObjectTypeMemory            = 'memory'
ObjectTypeMailMessage       = 'email message'
ObjectTypePagerData			= 'instant message'
ObjectTypeMailAttach        = 'email attachment'
ObjectTypeURL               = 'web page'
ObjectTypeScript            = 'VB or Java script'
ObjectTypePort              = 'network port'
ObjectTypeConnection        = 'network connection'
ObjectTypePacket            = 'network packet'
ObjectTypeDialStr           = 'phone number'
ObjectTypeDetectName        = 'detected'
ObjectTypeLogicalDisk       = 'logical disk'
ObjectTypeDevice            = 'device'
ObjectTypeVolume            = 'volume'
ObjectTypeString            = 'string'
ObjectTypeRegRoot           = 'registry'
ObjectTypeTask              = 'subsystem'
ObjectTypeNetwork           = 'network'
ObjectTypeNetworkAddr       = 'run line'
ObjectTypeFirewallLog       = 'Firewall report'
ObjectTypeNetArpChangeInfo  = 'change URLs'
ObjectTypeDriver            = 'driver file'
ObjectTypeUserName          = 'user name'
ObjectTypeHipsAppGroup      = 'group of applications'
ObjectTypeComObj            = 'COM object'
ObjectTypePriv              = 'privilege'
ObjectTypeVMOperation       = 'operation'
ObjectTypeObjTypeUnknown	= 'unknown'