Add passive file churn sensor beta

src/OCSentinelCli/Configuration.cs

@@ -28,6 +28,8 @@ internal sealed record ScannerConfiguration
 
     public bool RansomwareBetaEnabled { get; init; }
 
+    public bool RansomwareBetaAlertingEnabled { get; init; }
+
     public int RansomwareLookbackMinutes { get; init; } = 15;
 
     public int RansomwareWarningSignalCount { get; init; } = 2;
@@ -36,6 +38,20 @@ internal sealed record ScannerConfiguration
 
     public bool RansomwareCaptureSmbSessions { get; init; } = true;
 
+    public bool RansomwareFileChurnEnabled { get; init; }
+
+    public int RansomwareFileChurnWindowMinutes { get; init; } = 15;
+
+    public int RansomwareFileChurnWarningDeleteCount { get; init; } = 50;
+
+    public int RansomwareFileChurnWarningWriteCount { get; init; } = 250;
+
+    public int RansomwareFileChurnCriticalDeleteCount { get; init; } = 200;
+
+    public int RansomwareFileChurnCriticalWriteCount { get; init; } = 1000;
+
+    public int RansomwareFileChurnMaxAuditEvents { get; init; } = 5000;
+
     public List<string> RansomwareExcludedProcesses { get; init; } = [];
 
     public List<string> FtpRoots { get; init; } = [];