text: # -*- coding: utf-8 -*-
  """Constants and definitions."""
  
  from __future__ import unicode_literals
  
  TYPE_INDICATOR_ARTIFACT_GROUP = 'ARTIFACT_GROUP'
  TYPE_INDICATOR_COMMAND = 'COMMAND'
  TYPE_INDICATOR_DIRECTORY = 'DIRECTORY'
  TYPE_INDICATOR_FILE = 'FILE'
  TYPE_INDICATOR_PATH = 'PATH'
  TYPE_INDICATOR_WINDOWS_REGISTRY_KEY = 'REGISTRY_KEY'
  TYPE_INDICATOR_WINDOWS_REGISTRY_VALUE = 'REGISTRY_VALUE'
  TYPE_INDICATOR_WMI_QUERY = 'WMI'
  
  LABELS = {
      'Antivirus': 'Antivirus related artifacts, e.g. quarantine files.',
      'Authentication': 'Authentication artifacts.',
      'Browser': 'Web Browser artifacts.',
      'Cloud': 'Cloud applications artifacts.',
      'Cloud Storage': 'Cloud storage artifacts.',
      'Configuration Files': 'Configuration files artifacts.',
      'Execution': 'Contain execution events.',
      'ExternalAccount': (
          'Information about any user accounts e.g. username, '
          'account ID, etc.'),
      'External Media': 'Contain external media data or events e.g. USB drives.',
      'IM': 'Instant Messaging / Chat applications artifacts.',
      'iOS': 'Artifacts related to iOS devices connected to the system.',
      'History Files': 'History files artifacts e.g. .bash_history.',
      'KnowledgeBase': 'Artifacts used in knowledge base generation.',
      'Logs': 'Contain log files.',
      'Mail': 'Mail client applications artifacts.',
      'Memory': 'Artifacts retrieved from memory.',
      'Network': 'Describe networking state.',
      'Processes': 'Describe running processes.',
      'Rekall': 'Artifacts using the Rekall memory forensics framework.',
      'Software': 'Installed software.',
      'System': 'Core system artifacts.',
      'Users': 'Information about users.'
  }
  
  SUPPORTED_OS_DARWIN = 'Darwin'
  SUPPORTED_OS_LINUX = 'Linux'
  SUPPORTED_OS_WINDOWS = 'Windows'
  
  # yapf: disable
  SUPPORTED_OS = frozenset([
      SUPPORTED_OS_DARWIN,
      SUPPORTED_OS_LINUX,
      SUPPORTED_OS_WINDOWS])
  
  TOP_LEVEL_KEYS = frozenset([
      'conditions',
      'doc',
      'labels',
      'name',
      'provides',
      'sources',
      'supported_os',
      'urls'])
  # yapf: enable
  