np5
In the above example, the pack will only execute on hosts which are running processes called "foobar" or has users that start with "www".