definition: lookup interesting_processes_lookup app as process_name OUTPUT is_prohibited
  | search is_prohibited=True
description: This macro limits the output to process_names that have been marked as
  prohibited
name: prohibited_softwares