pub fn parse_selection(value: &str) -> Result<Selection, String>Expand description
Parse a sysmon= value: all, any, or a comma list of category
names. Unknown names are errors that NAME the valid set — a typo
silently monitoring nothing would be the failure mode this surface
exists to avoid.