# file: /home/runner/work/trustsight/trustsight/src/trustsight/analysis/sabotage.py
# hypothesis_version: 6.168.3

[120, '!=', '"\'', '&', '(?=[ \\t]|$|;|&|\\|)', ')', ')(?:\\s|$|;)', ')[\\"\']?(?:\\s|$|;|&)', ')[\\"\']?\\Z', ')\\b|', '+', '+++', '-', '--', '-eq', '-ge', '-gt', '-le', '-lt', '-n', '-ne', '-z', '/', '/?\\*?', '/\\*', '/bin', '/bin/false', '/bin/true', '/boot', '/etc', '/home', '/lib', '/lib64', '/opt', '/proc', '/root', '/sbin', '/srv', '/sys', '/usr', '/var', '0', '1', ':', ';', '=', '==', 'CRITICAL', 'Cryptocurrency Miner', 'HIGH', 'MEDIUM', 'NetworkManager', 'Recursive Self-Spawn', 'S001', 'S002', 'S003', 'S004', 'S005', 'S006', 'S007', 'S008', '[$`]', '[;&|]', '\\$\\{?BUILDDIR\\}?', '\\$\\{?_builddir\\}?', '\\$\\{?builddir\\}?', '\\$\\{?pkgdir\\}?', '\\$\\{?srcdir\\}?', '\\$\\{?startdir\\}?', '\\(\\(\\s*(.*?)\\s*\\)\\)', '\\A[\\"\']?(?:', '\\d+', 'apparmor', 'auditd', 'body', 'clamav-\\w+', 'cond', 'dbus', 'fail2ban', 'false', 'firewalld', 'for', 'history\\s+-c\\b|', 'ip6tables', 'iptables', 'kw', 'nftables', 'polkit', 'rm\\b', 'rsyslog', 'sabotage', 'selinux', 'setenforce\\s+0\\b', 'shred\\s+[^\\n]*?', 'sshd?', 'syslog-ng', 'systemd-\\w+', 'systemd-journald', 'systemd-logind', 'systemd-networkd', 'systemd-resolved', 'test ', 'true', 'ufw', 'unset\\s+HISTFILE\\b|', 'until', 'while', '|']