if windows is != windows or windows != unknown
-> condition passes because windows is not unknown and you have an or
and agent status - alive.
What would be the proper syntax for such a signature, as i would have assumed grouping the two conditions together would mean that if one fails, then the group fails?
So i would want a system that matches either Windows or Unknown to fail. Just to understand the logic.
Try to use AND operator for below condition
[[ ??TARGET.OS_ENUMERATED_VALUE*?? != "Windows" ]] AND
[[ ??TARGET.OS_ENUMERATED_VALUE*?? != "Unknown" ]]
It should work.