[
  {
    "name": "windows",
    "title": "Windows",
    "version": "3.9.0",
    "release": "ga",
    "description": "Collect logs and metrics from Windows OS and services with Elastic Agent.",
    "type": "integration",
    "download": "/epr/windows/windows-3.9.0.zip",
    "path": "/package/windows/3.9.0",
    "icons": [
      {
        "src": "/img/logo_windows.svg",
        "path": "/package/windows/3.9.0/img/logo_windows.svg",
        "title": "logo windows",
        "size": "32x32",
        "type": "image/svg+xml"
      }
    ],
    "policy_templates": [
      {
        "name": "windows",
        "title": "Windows logs and metrics",
        "description": "Collect logs and metrics from Windows instances"
      }
    ],
    "conditions": {
      "kibana": {
        "version": "^8.14.0 || ^9.0.0"
      },
      "elastic": {
        "subscription": "basic"
      }
    },
    "owner": {
      "type": "elastic",
      "github": "elastic/elastic-agent-data-plane"
    },
    "categories": [
      "os_system",
      "security",
      "observability"
    ],
    "signature_path": "/epr/windows/windows-3.9.0.zip.sig",
    "data_streams": [
      {
        "type": "logs",
        "dataset": "windows.applocker_exe_and_dll",
        "title": "Windows AppLocker/EXE and DLL logs"
      },
      {
        "type": "logs",
        "dataset": "windows.applocker_msi_and_script",
        "title": "Windows AppLocker/MSI and Script logs"
      },
      {
        "type": "logs",
        "dataset": "windows.applocker_packaged_app_deployment",
        "title": "Windows AppLocker/Packaged app-Deployment logs"
      },
      {
        "type": "logs",
        "dataset": "windows.applocker_packaged_app_execution",
        "title": "Windows AppLocker/Packaged app-Execution logs"
      },
      {
        "type": "logs",
        "dataset": "windows.forwarded",
        "title": "Windows forwarded events"
      },
      {
        "type": "metrics",
        "dataset": "windows.perfmon",
        "title": "Windows perfmon metrics"
      },
      {
        "type": "logs",
        "dataset": "windows.powershell",
        "title": "Windows Powershell logs"
      },
      {
        "type": "logs",
        "dataset": "windows.powershell_operational",
        "title": "Windows Powershell/Operational logs"
      },
      {
        "type": "metrics",
        "dataset": "windows.service",
        "title": "Windows service metrics"
      },
      {
        "type": "logs",
        "dataset": "windows.sysmon_operational",
        "title": "Windows Sysmon/Operational events"
      },
      {
        "type": "logs",
        "dataset": "windows.windows_defender",
        "title": "Windows Defender logs"
      }
    ]
  }
]
