From f826872e4baa598d7222eda6dd0cb047efdbce05 Mon Sep 17 00:00:00 2001
From: JGStew <james@jgstew.com>
Date: Thu, 17 Oct 2024 12:00:03 -0400
Subject: [PATCH] add BigFix Server Plugin Services.bes

---
 analyses/BigFix Server Plugin Services.bes | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)
 create mode 100644 analyses/BigFix Server Plugin Services.bes

diff --git a/analyses/BigFix Server Plugin Services.bes b/analyses/BigFix Server Plugin Services.bes
new file mode 100644
index 0000000..a2c3f87
--- /dev/null
+++ b/analyses/BigFix Server Plugin Services.bes	
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<BES xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="BES.xsd">
+	<Analysis>
+		<Title>BigFix Server Plugin Services</Title>
+		<Description><![CDATA[&lt;enter a description of the analysis here&gt; ]]></Description>
+		<Relevance>exists relay service OR exists main gather service</Relevance>
+		<Relevance>exists folders "Applications" of parent folders of (folders it) of values of settings "_BESRelay_HTTPServer_ServerRootPath" of client</Relevance>
+		<Source>Internal</Source>
+		<SourceReleaseDate>2024-10-17</SourceReleaseDate>
+		<MIMEField>
+			<Name>x-fixlet-modification-time</Name>
+			<Value>Thu, 17 Oct 2024 15:57:19 +0000</Value>
+		</MIMEField>
+		<Domain>BESC</Domain>
+		<Property Name="Plugin Folder" ID="1" EvaluationPeriod="PT1H">pathnames of folders "Applications" of parent folders of (folders it) of values of settings "_BESRelay_HTTPServer_ServerRootPath" of client</Property>
+		<Property Name="Mod Time of Plugin Service Log" ID="2" EvaluationPeriod="PT30M">modification times of files "Logs/MFS.log" of folders "Applications" of parent folders of (folders it) of values of settings "_BESRelay_HTTPServer_ServerRootPath" of client</Property>
+		<Property Name="Names of defined plugins" ID="4" EvaluationPeriod="PT30M"><![CDATA[unique values of preceding texts of firsts "</Name>" of following texts of firsts "<Name>" of lines containing "</Name>" of files whose(name of it as lowercase ends with ".xml") of folders "Config" of folders "Applications" of parent folders of (folders it) of values of settings "_BESRelay_HTTPServer_ServerRootPath" of client]]></Property>
+		<Property Name="Mod Time of Plugin Logs" ID="5" EvaluationPeriod="PT1H">(names of it, modification times of files whose(name of it as lowercase ends with ".log") of it) of folders whose(name of it != "Logs") of folders "Applications" of parent folders of (folders it) of values of settings "_BESRelay_HTTPServer_ServerRootPath" of client</Property>
+		<Property Name="Find Plugin Binary" ID="6" EvaluationPeriod="PT6H"><![CDATA[pathnames of files ( (it; it & ".exe") of unique values of (names of folders whose(name of it != "Logs") of it ; preceding texts of firsts "</Name>" of following texts of firsts "<Name>" of lines containing "</Name>" of files whose(name of it as lowercase ends with ".xml") of folders "Config" of it) of folders "Applications" of parent folders of (folders it) of values of settings "_BESRelay_HTTPServer_ServerRootPath" of client ) of folders of folders "Applications" of parent folders of (folders it) of values of settings "_BESRelay_HTTPServer_ServerRootPath" of client]]></Property>
+		<Property Name="Files in Plugin Commands" ID="7" EvaluationPeriod="PT1H"><![CDATA[pathnames of (files it) of following texts of firsts "%22" of substrings separated by "%22 " of unique values of preceding texts of firsts "</Command>" of following texts of firsts "<Command>" of lines containing "</Command>" of files whose(name of it as lowercase ends with ".xml") of folders "Config" of folders "Applications" of parent folders of (folders it) of values of settings "_BESRelay_HTTPServer_ServerRootPath" of client]]></Property>
+	</Analysis>
+</BES>