secrets_ignore_whitelist.json

{
  "files": [
    "package-lock.json",
    "package.json",
    "Integrations/SMIME_Messaging/README.md",
    "Beta_Integrations/SymantecDLP/README.md",
    "Integrations/Flashpoint/README.md",
    "Integrations/PhishLabsIOC_DRP/PhishLabsIOC_DRP_test.py",
    "Beta_Integrations/AWS-AccessAnalyzer/AWS-AccessAnalyzer.yml",
    "Documentation/doc-howto.json",
    "Integrations/rasterize/test_data/large.html",
    "Integrations/RiskSense/README.md",
    "Integrations/RiskSense/RiskSense_image.png",
    "Integrations/AutofocusV2/README.md",
    "Integrations/Devo_v2/README.md",
    "Integrations/CrowdStrikeFalcon/README.md",
    "Playbooks/playbook-PAN-OS_DAG_Configuration_README.md",
    "Integrations/CrowdStrikeFalcon/README.md",
    "Integrations/integration-EasyVista_README.md",
    ".github/workflows/pre-commit.yml",
    "secrets_ignore_whitelist.json",
    "CommonServerPython.py"
  ],
  "iocs": {
    "ips": [
      "10.10.0.0",
      "10.10.0.1",
      "10.10.0.12",
      "23.223.223.233",
      "98.222.222.9",
      "216.6.0.28",
      "112.126.94.107",
      "68.232.135.242",
      "68.232.142.41",
      "46.98.200.157",
      "192.168.100.1",
      "1.125.227.13",
      "201.93.212.87",
      "108.177.127.102",
      "108.177.127.139",
      "108.177.15.138",
      "224.0.0.22",
      "108.177.15.113",
      "10.0.2.15",
      "108.177.15.101",
      "108.177.15.100",
      "10.0.2.2",
      "51.141.32.51",
      "216.58.206.238",
      "108.177.15.102",
      "239.255.255.250",
      "108.177.127.138",
      "10.0.2.255",
      "51.140.127.197",
      "108.177.127.101",
      "108.177.127.100",
      "108.177.122.139",
      "82.112.184.197",
      "108.177.127.113",
      "209.59.181.77",
      "198.12.91.160",
      "2.0.182.1",
      "93.174.93.255",
      "80.82.77.139",
      "60.191.38.77",
      "82.211.30.0",
      "216.75.62.8",
      "93.174.93.1",
      "46.148.22.18",
      "7.77.7.7",
      "172.31.25.170",
      "3.2.3.2",
      "116.202.56.112",
      "80.227.43.146",
      "17.252.141.15",
      "10.100.100.66",
      "10.10.10.230",
      "10.10.10.243",
      "10.100.100.254",
      "80.80.80.146",
      "10.10.10.241",
      "112.56.202.116",
      "10.100.100.17",
      "10.10.10.21",
      "172.31.31.110",
      "112.175.209.72",
      "105.102.75.16",
      "172.18.20.20",
      "186.185.91.72",
      "104.236.48.178",
      "104.236.54.196",
      "5.5.255.25",
      "5.5.5.179",
      "181.61.87.106",
      "151.101.12.133",
      "172.31.37.106",
      "232.12.34.135",
      "91.140.64.113",
      "3.1.5.63",
      "3.2.4.54",
      "52.49.120.63",
      "99.80.149.227",
      "18.202.247.204",
      "73.92.194.57",
      "3.1.3.38",
      "3.122.240.42",
      "34.100.71.242",
      "98.234.105.153",
      "92.119.160.40",
      "77.247.110.59",
      "159.203.169.16",
      "185.176.27.118",
      "185.254.120.27",
      "85.93.20.34",
      "192.168.1.77",
      "151.101.0.0",
      "8.8.3.3",
      "77.8.77.8",
      "3.5.3.5",
      "5.7.5.7",
      "9.7.9.7",
      "55.7.55.7",
      "6.1.7.1",
      "4.7.4.7",
      "6.8.6.8",
      "44.2.44.2",
      "85.13.155.169",
      "52.86.122.241",
      "54.165.193.163",
      "52.15.91.198",
      "186.29.149.40",
      "23.7.44.197",
      "104.67.128.36",
      "96.16.84.130",
      "104.98.248.71",
      "173.222.24.202",
      "23.197.219.175",
      "23.212.29.129",
      "172.233.131.187",
      "204.12.0.50",
      "222.163.206.206",
      "172.231.209.35",
      "50.23.225.49",
      "172.228.24.209",
      "54.235.96.83",
      "192.168.39.128",
      "172.16.3.7",
      "::Dec",
      "93.174.93.63",
      "1.2.0.1",
      "192.168.1.44",
      "192.168.1.8",
      "192.168.1.31",
      "192.168.1.52",
      "10.212.134.200",
      "172.31.46.243",
      "77.247.181.163",
      "11.0.0.2",
      "213.35.2.109",
      "192.168.5.172",
      "192.168.5.189",
      "192.168.138.158",
      "5.8.4.61",
      "150.242.117.189",
      "5.8.4.64",
      "172.22.100.85",
      "172.31.36.134",
      "172.31.36.196",
      "5.8.4.17",
      "8.36.116.16",
      "3.7.1.4",
      "108.177.121.101",
      "108.177.119.102",
      "108.177.12.101",
      "108.177.120.100",
      "108.177.10.102",
      "108.177.119.138",
      "108.177.12.139",
      "108.177.120.113",
      "108.177.111.113",
      "108.177.11.100",
      "108.177.112.139",
      "108.177.119.113",
      "108.177.122.113",
      "108.177.11.139",
      "108.177.12.100",
      "108.177.120.138",
      "108.177.119.100",
      "108.177.12.113",
      "108.177.121.100",
      "108.177.112.101",
      "108.177.122.138",
      "108.177.121.139",
      "108.177.120.139",
      "108.177.11.101",
      "108.177.120.101",
      "108.177.122.100",
      "108.177.119.101",
      "108.177.112.100",
      "108.177.111.102",
      "108.177.111.138",
      "108.177.112.102",
      "108.167.133.29",
      "108.177.111.100",
      "108.177.11.113",
      "108.177.112.138",
      "108.177.121.113",
      "108.177.12.138",
      "108.177.11.138",
      "108.177.122.101",
      "108.177.11.102",
      "108.177.12.102",
      "108.177.112.113",
      "108.177.121.138",
      "108.177.122.102",
      "108.177.120.102",
      "108.177.111.101",
      "108.177.121.102",
      "108.177.111.139",
      "108.177.119.139",
      "108.177.10.100",
      "95.181.249.58",
      "182.176.178.74",
      "192.168.2.81",
      "140.80.0.101",
      "3.0.2.8",
      "192.168.2.22",
      "67.143.208.113",
      "3.1.0.100",
      "11.1.0.0",
      "192.168.255.255",
      "172.16.90.1",
      "172.16.20.1",
      "10.248.100.74",
      "122.175.240.173",
      "113.186.213.226",
      "37.27.67.92",
      "184.105.192.2",
      "117.194.21.62",
      "9.0.01.001",
      "172.16.2.20",
      "162.236.53.68",
      "172.16.40.55",
      "10.0.0.6",
      "4.4.0.6",
      "185.72.179.152",
      "5.29.211.60",
      "6.7.4.1",
      "2.2.1.1",
      "172.31.33.227",
      "194.147.35.172",
      "39.41.26.166",
      "121.31.166.99",
      "182.91.129.207",
      "182.88.27.168",
      "184.168.221.52",
      "192.168.2.4",
      "54.39.20.14",
      "182.91.129.165",
      "50.63.202.51",
      "1.2.3.3",
      "1.2.3.7",
      "1.4.5.6",
      "10.0.9.117",
      "000::000",
      "23.20.239.12",
      "172.22.14.237",
      "192.168.1.76",
      "5.5.5.111",
      "4.4.4.5",
      "2001:db8:a0b:12f0::",
      "172.40.5.10",
      "40.126.0.0",
      "13.106.4.128",
      "13.106.56.0",
      "20.190.128.0",
      "3.3.3.4",
      "10.128.0.1",
      "10.128.0.4",
      "10.128.0.5",
      "172.0.0.0",
      "54.215.248.188",
      "52.8.161.117",
      "52.215.53.168",
      "1.1.1.1.1.1.1.1.1.1.1.1.1.1.1",
      "KKKK:0000:0000:0000:0202:B3FF:FE1E:8329",
      "FE80::0202:B3FF:FE1E:8329",
      "FE80:0000:0000:0000:0202:B3FF:FE1E:8329",
      "10.10.10.9999",
      "7.7.7.7",
      "192.168.2.0",
      "23.62.60.187",
      "6.7.8.9",
      "10.1.1.254",
      "12.12.12.12",
      "14.14.14.14",
      "172.31.39.254",
      "31.177.34.128",
      "104.196.188.170",
      "176.10.104.240",
      "10.1.1.1",
      "10.1.1.0",
      "5.6.7.8",
      "10.54.12.6",
      "139.130.4.5",
      "104.196.188.170",
      "5.79.86.16",
      "192.168.0.1",
      "192.168.0.2",
      "192.168.0.3",
      "1.2.3.4",
      "8.8.8.8",
      "3.7.3.221",
      "192.168.1.136",
      "192.168.10.23",
      "123.123.123.65",
      "22.22.1.1",
      "192.168.1.2",
      "10.0.10.1",
      "192.168.1.1",
      "1.1.22.22",
      "1.1.1.1",
      "127.0.0.2",
      "22.22.22.22",
      "19.12.13.11",
      "192.168.10.1",
      "147.75.33.100",
      "95.181.53.78",
      "216.3.128.82",
      "4.4.4.4",
      "127.0.0.1",
      "78.125.0.209",
      "1.0.0.39",
      "192.168.56.101",
      "1.1.1.0",
      "1.1.1.2",
      "3.4.5.6",
      "1.3.4.5",
      "1.0.0.52",
      "192.168.100.55",
      "192.0.0.1",
      "10.10.10.10",
      "10.10.10.255",
      "2.2.2.2",
      "10.10.10.0",
      "1.2.3.8",
      "41.79.151.82",
      "192.168.56.108",
      "192.12.12.3",
      "35.158.26.15",
      "120.0.0.1",
      "8.8.4.4",
      "10.0.0.1",
      "10.0.0.2",
      "10.0.0.4",
      "101.43.52.224",
      "66.34.253.56",
      "10.10.10.1",
      "10.10.10.20",
      "10.10.10.25",
      "10.10.10.13",
      "10.10.10.29",
      "10.10.24.1",
      "10.10.24.20",
      "195.22.26.248",
      "107.161.186.90",
      "192.168.2.1",
      "192.16.0.0",
      "100.64.0.0",
      "172.16.0.0",
      "198.18.0.0",
      "192.168.0.0",
      "192.0.0.0",
      "10.0.0.0",
      "172.0.0.2",
      "203.0.113.0",
      "192.0.2.128",
      "169.254.0.0",
      "1.0.0.127",
      "192.0.2.8",
      "56.1.1.1",
      "192.0.0.2",
      "224.0.0.0",
      "255.255.255.224",
      "255.255.0.0",
      "255.0.0.0",
      "255.255.255.0",
      "0.0.0.0",
      "127.0.0.0",
      "255.255.255.255",
      "1.0.0.0",
      "192.0.2.64",
      "192.0.2.0",
      "192.0.2.1",
      "192.0.2.2",
      "192.0.2.3",
      "192.0.2.4",
      "192.0.2.5",
      "192.0.2.6",
      "192.0.2.7",
      "192.0.2.8",
      "192.0.2.9",
      "192.0.2.10",
      "0.1.0.0",
      "0.255.255.255",
      "192.0.2.130",
      "240.0.0.0",
      "0.0.0.31",
      "198.51.100.0",
      "192.0.2.32",
      "94.188.164.68",
      "9.9.9.9",
      "128.238.25.159",
      "178.62.60.225",
      "10.200.103.100",
      "10.200.104.236",
      "172.228.24.0",
      "69.172.200.235",
      "8.8.8.8",
      "1.1.1.22",
      "1.2.3.99",
      "151.101.1.67",
      "32.43.54.65",
      "123.57.77.130",
      "34.242.204.193",
      "8.8.1.1",
      "199.203.151.209",
      "5.5.5.5",
      "25.25.25.25",
      "93.184.216.34",
      "35.165.118.153",
      "10.238.89.39",
      "8.3.3.3",
      "172.31.7.250",
      "4.3.7.5",
      "3.3.3.3",
      "127.0.0.8",
      "92.0.1.82",
      "9.9.4.4",
      "84.238.65.92",
      "10.10.10.9",
      "106.184.5.30",
      "103.225.52.112",
      "218.227.212.90",
      "176.228.66.70",
      "10.128.123.2",
      "109.67.222.51",
      "10.175.53.17",
      "10.172.53.20",
      "216.32.181.115",
      "54.225.87.32",
      "10.168.108.148",
      "10.152.72.195",
      "216.32.181.181",
      "10.164.25.28",
      "10.163.132.152",
      "10.162.103.27",
      "52.54.78.222",
      "10.152.77.193",
      "40.107.70.133",
      "10.168.106.8",
      "10.152.72.184",
      "213.57.104.176",
      "20.177.218.153",
      "20.176.100.33",
      "213.57.104.176",
      "54.225.87.32",
      "52.54.78.222",
      "207.46.163.111",
      "10.164.155.36",
      "10.152.76.252",
      "216.32.180.85",
      "6.6.6.5",
      "10.168.106.8",
      "10.152.77.107",
      "104.47.34.116",
      "10.152.72.95",
      "10.163.132.152",
      "98.137.246.7",
      "172.16.0.10",
      "23.210.254.113",
      "212.126.107.130",
      "1.0.0.98",
      "1.0.0.128",
      "172.16.20.207",
      "172.16.20.234",
      "185.141.27.177",
      "212.126.107.130",
      "192.168.100.32",
      "192.168.100.33",
      "172.16.200.80",
      "10.80.80.0",
      "34.247.165.10",
      "10.80.80.0",
      "20.178.251.203",
      "10.255.180.79",
      "84.111.21.64",
      "5.57.16.220",
      "116.101.134.118",
      "144.172.153.165",
      "98.137.246.8",
      "123.176.102.168",
      "1.1.1.69",
      "5.6.4.1",
      "18.219.190.57",
      "172.16.34.231",
      "172.16.34.161",
      "172.16.34.152",
      "172.16.34.11",
      "172.16.34.23",
      "104.244.42.129",
      "10.208.210.50",
      "10.208.209.26",
      "10.208.210.20",
      "10.208.210.163",
      "172.16.0.1",
      "10.5.5.5",
      "4.2.2.2",
      "5.6.0.0",
      "10.0.0.5",
      "92.63.197.153",
      "210.122.7.129",
      "66.196.219.2",
      "54.238.142.98",
      "111.90.149.220",
      "20.36.37.97",
      "54.238.142.98",
      "213.182.138.224",
      "212.115.110.19",
      "188.192.67.232",
      "192.241.175.250",
      "201.219.197.138",
      "195.154.27.50",
      "203.147.71.11",
      "208.113.210.246",
      "210.51.167.245",
      "194.126.183.171",
      "200.77.186.170",
      "213.100.209.39",
      "193.34.161.137",
      "203.147.74.216",
      "2.84.107.193",
      "202.200.142.251",
      "191.97.1.40",
      "198.144.108.117",
      "207.246.249.197",
      "212.220.204.238",
      "208.97.189.248",
      "188.166.228.244",
      "188.166.23.215",
      "206.189.129.38",
      "190.60.103.178",
      "193.169.5.14",
      "213.109.235.231",
      "201.161.58.245",
      "190.85.247.140",
      "207.107.67.67",
      "195.69.135.78",
      "206.189.229.112",
      "193.56.28.196",
      "207.248.62.98",
      "194.228.227.157",
      "194.12.18.147",
      "213.177.121.139",
      "190.102.154.131",
      "172.217.22.110",
      "54.238.142.98",
      "0.154.17.105",
      "104.218.120.128",
      "10.2.2.20",
      "122.8.170.14",
      "103.76.228.28",
      "4.4.0.8"
    ],
    "ipv6": [
      "2001:db8:1234:1a00::",
      "::1234",
      "fc00:11::",
      "e1C::c",
      "fe80:0000:0000:0000:91ba:7558:26d3:acde",
      "fe80:0000:0000:0000:2811:397d:53e0:db3b",
      "fe80:0000:0000:0000:04f9:deff:fe36:ddb0",
      "2001:0000:9d38:6ab8:2811:397d:53e0:db3b",
      "fe80:0008:0000:0000:aede:48ff:fe00:1122",
      "fe80:0000:0000:0000:0000:5efe:ac1f:24c4",
      "000:000:000::1",
      "fd60:e22:f1b9::2",
      "2620:1ec:c::10",
      "2001:db8:85a3:8d3:1319:8a2e:370:7348",
      "2001:0db8:0000:0000:0000:ff00:0042:8329",
      "2a01:111:f406:1805::",
      "01:111:f406:1805::",
      "fd60:e32:f1b9::2",
      "2603:10b6:208:160::47",
      "2001:db8::100f",
      "2001:db8:0000:0000:0000:0000:0000:0000",
      "4000::",
      "e000::",
      "2001:2::",
      "2001::",
      "2001:db8:8000::",
      "::ffff:0:0",
      "6000::",
      "8000::",
      "100::",
      "a000::",
      "2001:db8::2",
      "fe80::",
      "2001:db8::1",
      "2001:db8::4",
      "800::",
      "2001:db8::8",
      "2001:10::",
      "fec0::",
      "2001:db8::",
      "2603:10a6:4:5f::22",
      "2603:10a6:4:74::13",
      "200::",
      "400::",
      "fc00::",
      "2001:db8::1000",
      "fe00::",
      "1000::",
      "f800::",
      "ff00::",
      "2001:db8::2000",
      "c000::",
      "f000::",
      "0.0.0.255",
      "ffff:ffff:ffff:ffff:ffff:ffff:ffff:fff0",
      "2603:10b6:300:12a::12",
      "2a01:111:f400:7e44::203",
      "2a01:111:f400:7e44::201",
      "2603:10b6:3:10::10",
      "2603:10b6:405:2::23",
      "2603:10b6:301::20",
      "2a01:111:f400:7e46::208",
      "2a01:111:e400:1438::18",
      "2603:10b6:3:10::8",
      "2603:10b6:404:4b::22",
      "2603:10b6:3:22::14",
      "2a01:111:e400:3422::20",
      "2603:10b6:3:22::23",
      "2a01:111:f400:7e44::209",
      "2603:10b6:3:115::23",
      "2603:10b6:0:54::19",
      "2a01:111:f400:7e46::208",
      "2a01:111:f400:7e46::204",
      "2603:10b6:3:10::9",
      "2603:10b6:301::30",
      "2603:10b6:805:3e::47",
      "2603:10b6:805:66::33",
      "2000::20C:29FF:FEB9:8FD3",
      "2603:10b6:805:66::33",
      "2001:4860:4860::8888",
      "10.254.7.24",
      "255.255.253.0",
      "19.117.63.126",
      "10.77.184.232",
      "19.117.63.253",
      "1.1.1.3",
      "1.2.3.5",
      "25.24.23.22",
      "22.21.20.19",
      "9.5.9.62",
      "192.168.1.57",
      "192.168.1.0",
      "22.21.20.19",
      "172.20.22.182",
      "10.2.2.0",
      "192.168.60.0",
      "10.2.2.0",
      "192.168.60.0",
      "10.3.3.3",
      "10.10.12.1"
    ],
    "_comment": "ENTER URLS WITHOUT http/s, www and path",
    "urls": [
      "https://output.circle-artifacts.com",
      "https://install.python-poetry.org",
      "https://pyenv.run",
      "https://xsoar.docs.pan.run",
      "https://docs.gitlab.com",
      "https://xsoar.ideas.aha.io",
      "https://my.eula.com",
      "https://open.vscode.dev",
      "https://forms.gle",
      "https://www.office.com",
      "testurl.com",
      "https://.",
      "https://vscode.dev",
      "https://uesr",
      "jsdoc-to-markdown@5.0.3",
      "panorama.corp.local",
      ".",
      "s..com",
      "provision.x.io",
      "bugs..org",
      "m",
      "falcon.",
      "unen.me",
      "developers.",
      "ti-aws1-api.labs.com",
      "api-us.log.com",
      "panacea.grid.com",
      "wiki.now.com",
      ".nai.com",
      "app.snd",
      "demo.ertack.com",
      "raw.user.com",
      "kc.",
      "thisurlwillneverexist4444.co.il",
      "charles@corp.com",
      "newnsm@corp.com",
      "ci@v0.2",
      "stix..io",
      "jason@corp.com",
      "soc+bncbc433amq6qhrb76000edcdhd3q@corp.com",
      "soc+bncbc433amq6qhrb76ir3l0000edcdhd3q@corp.com",
      "diana@corp.com",
      "u003csoc@corp.com",
      "SOC@corp.com",
      "rachel@corp.com",
      "int-sights.net",
      "user1@mail.com",
      "moviepropit.com",
      "user@domain.com",
      "malc0de.com",
      "https://formsnym.ag.ny.gov",
      "https://www.nysenate.gov",
      "yandex.com",
      "www.malwaredomainlist.com",
      "zeustracker.abuse.ch",
      "junk.name@jonk.com",
      "content.any.run",
      "app.any.run",
      "a.co.il",
      "e71ed0532685.o3n.io",
      "192.168.1.43",
      "example2@gmail.com",
      "pedmart@gmail.com",
      "example1@gmail.com",
      "jeffrey.collins@gmail.com",
      "example3@gmail.com",
      "sskymedia.com",
      "name@company.com",
      "replymail@company.com",
      "test@company.com",
      "tinyurl.com",
      "someurl.com",
      "badperson.com",
      "tiny.url.com",
      "john@wick.com",
      "msdn.microsoft.com",
      "test@demisto.int",
      "ldap.com",
      "demistoadmin@demisto.int",
      "jack@company.com",
      "paloalto-networks.alienvault.cloud",
      "someemail@domain.com",
      "foaas.com",
      "admin@admin.test",
      "email@gmail.com",
      "group@dgmail.com",
      "test@gmail.com",
      "mcafee.com",
      "jack@company.com",
      "test@demisto.int",
      "msdn.microsoft.com",
      "demistoadmin@demisto.int",
      "ldap.com",
      "vassg142.crl.omniroot.com",
      "http://vassg142.crl.omniroot.com",
      "f5.com",
      "reddit.com",
      "canindia.com",
      "obfuscated.com",
      "news.8btc.com",
      "user-images.githubusercontent.com",
      "access.redhat.com",
      "raw.githubusercontent.com",
      "aws.amazon.com",
      "archive.apache.org",
      "16@gmail.com",
      "foo@test.com",
      "zoom.us",
      "qlql.ru",
      "icann.org",
      "www.arkham-mass.com",
      "kzkoicaalumni.com",
      "kinaneevents.com",
      "amandanovotny49.com",
      "acre-services.com",
      "www.markmonitor.com",
      "abusecomplaints@markmonitor.com",
      "icann.org",
      "escenas.cl",
      "actor@org.com",
      "johndoe@test.org",
      "test@that.com",
      "target@org.com",
      "54.190.157.130",
      "test@domain.com",
      "jondoe@test.org",
      "vectranetworks.com",
      "autofocus.samples.id",
      "autofocus.sessions.id",
      "updates.cdc.carbonblack.io",
      "wikis.uit.tufts.edu",
      "stackedit.io",
      "admin@company.com",
      "sky-fraud.ru",
      "bcbm4y7yusdxthg3.onion",
      "www.technobuffalo.com",
      "dummy1@hotmail.com",
      "pastebin.com",
      "apt.ripbigboss.com",
      "bitshacking.com",
      "www.lifewire.com",
      "ibb.co",
      "dummy2@sina.com",
      "dummy3@hotmail.com",
      "server",
      "SERVER",
      "216.128.82",
      "www.logtrust.com",
      "skyformation.zendesk.com",
      "portal.secureworks.com",
      "example@aol.com",
      "dev@demisto.works",
      "www.example2.com%2Chttps",
      "www.example2.com",
      "WIN-CQD6UQJIA7J",
      "sync.bigfix.com",
      "content.demisto.works",
      "www.vaultproject.io",
      "csrgenerator.com",
      "mar.services.name",
      "mar.processes.id",
      "mar.files.name",
      "mar.processes.name",
      "jane@company.com",
      "john@company.com",
      "email@company.com",
      "alice@company.com",
      "panda.tech-tw.com",
      "panda.tech",
      "azmwn.suliparwarda.com",
      "suliparwarda.com",
      "swagger.io",
      "support.safebreach.com",
      "foo@test.com",
      "goo@test.com",
      "194.147.35.172",
      "https://raw.githubusercontent.com",
      "https://xsoar.pan.dev",
      "https://callback.url",
      "xsoar.pan.dev",
      "json-schema.org",
      "vxsuz5.manage.trendmicro.com",
      "docs.trendmicro.com",
      "proxyserver.com",
      "self-signed.badssl.com",
      "github.com/demisto/",
      "https://not_graph",
      "https://test1",
      "tools.emergingthreats.net",
      "demodev.backstory.chronicle.security",
      "em.usw-mail.com",
      "gallery.mailchimp.com",
      "infoblow.com",
      "defense.conferdeploy.net",
      "demistodev.atlassian.net",
      "support.atlassian.com",
      "nightly-test-naptr-sub.infoblow.com",
      "nightly-test-aaaa-sub.infoblow.com",
      "infonlox.nightly.tpb.com",
      "nightly-test-txt-sub.infoblow.com",
      "4.4.4.5.infoblow.com",
      "nightly-test-rpz-sub.infoblow.com",
      "nightly-test-mx-sub.infoblow.com",
      "nightly-test-srv-sub.infoblow.com",
      "nightly-test-a-sub.infoblow.com",
      "https://url",
      "devo.com",
      "docs.mcafee.com",
      "https://www.sans.org",
      "app.kennasecurity.com",
      "https://source_url.com",
      "endpoints.office.com",
      "https://demisto.pan.dev",
      "shields.io",
      "lgtm.com",
      "http://_23_11.redacted.com",
      "guardrails.io",
      "https://vm.tryfrontline.cloud/",
      "https://vm.frontline.cloud",
      "https://.amazonaws.com",
      "onedrive.live.com",
      "exabeam.com",
      "oti.slashnext.cloud",
      "demisto.mock.mybrz.net",
      "https://nvlpubs.nist.gov",
      "app.bitdam.com",
      "akamai.com",
      "luna.akamaiapis.net",
      "www.markdownguide.org",
      "akab-hnanog6ge5or6biz-ukavvo4zvqliqhlw.cloudsecurity.akamaiapis.net",
      "https://demisto.mock.mybrz.net",
      "https://app.bitdam.com",
      "api.slack.com",
      "phishlabs.com",
      "api.service.com",
      "upload.wikimedia.org",
      "login.botframework.com",
      "www.docker.com",
      "alexa.com",
      "blackhat.al",
      "tagnet.app",
      "dns.google",
      "phishlabs.com",
      "paulvmoreau.github.io",
      "vigilant.alienvault.cloud",
      "flake8.pycqa.org/en/latest",
      "mypy-lang.org",
      "flake8.pycqa.org",
      "pylint.readthedocs.io",
      "mypy.readthedocs.io",
      "i.ytimg.com",
      "bing.com",
      "docs.aws.amazon.com",
      "http://docs.aws.amazon.com",
      "www.youtube.com",
      "www.fotoidea.com",
      "cdn.zerofox.com",
      "yt3.ggpht.com",
      "annachapman3.icu",
      "api.botframework.com",
      "https://zasobygwp.pl,",
      "https://optusupdatemail.com",
      "http://111.90.149.220",
      "http://jppost-ki.co/zog.html",
      "https://github.com",
      "https://a1.gymtracker.net",
      "https://rebrand.ly/ir3td8|",
      "http://genuineautoparts.co.uk",
      "https://paypal.co.uk.6mon.icu",
      "https://software8n-chase.com",
      "http://magalufimdesemana.com",
      "http://genuineautoparts.co.uk",
      "http://ahahahahah.buzz",
      "https://software8n-chase.com",
      "https://www.americanas.semanasaldao.com",
      "http://paypal.co.uk.useriq3sr4wszak.settingsppup.com",
      "https://a1.gymtracker.net",
      "https://www.americanas.semanasaldao.com",
      "https://www35.janeirodepromocao.com",
      "http://111.90.149.220",
      "http://www.lifetmeda.ru",
      "https://www31.janeirodepromocao.com",
      "https://software8n-chase.com",
      "https://www31.janeirodepromocao.com",
      "https://ltau-portal.com",
      "http://dreamhouse.in.th",
      "https://rebrand.ly",
      "https://addventures.reclaimbetasite.com",
      "http://novasmelhoresluiza.com",
      "http://www.lifetmeda.ru",
      "https://t.co",
      "https://www35.janeirodepromocao.com",
      "https://belovedcommunityusa.com",
      "https://a1.gymtracker.net",
      "https://software8n-chase.com",
      "http://0fertas-do-dia-24hr-com.umbler.net",
      "https://a1.gymtracker.net",
      "http://exam.karthikeyaiasacademy.com",
      "http://ahahahahah.buzz",
      "http://magalufimdesemana.com",
      "http://mindspring.com",
      "http://exam.karthikeyaiasacademy.com",
      "https://addventures.reclaimbetasite.com",
      "https://zasobygwp.pl",
      "http://clinicaskin.cl",
      "http://telesomonline.com",
      "http://medimobility.es",
      "https://kb-healthcare.com",
      "http://magalufimdesemana.com/promocao.php",
      "https://x0m0s.weblium.site",
      "http://sdfgress.info",
      "http://www.mahmoudghoneim.com",
      "http://www.lifetmeda.ru",
      "http://20.36.37.97",
      "https://addventures.reclaimbetasite.com",
      "https://services.runescape.com-ey.top",
      "http://jppost-ki.co",
      "https://icloud.com.uk-maps.info",
      "http://magalufimdesemana.com",
      "http://clinicaskin.cl",
      "https://www31.janeirodepromocao.com",
      "https://www31.janeirodepromocao.com",
      "https://rebrand.ly",
      "https://wow.com",
      "https://hmrc.5-notifications.com",
      "http://exam.karthikeyaiasacademy.com",
      "http://exam.karthikeyaiasacademy.com",
      "http://www.ablenew.biz",
      "https://hmrc.5-notifications.com",
      "http://0fertas-do-dia-24hr-com.umbler.net",
      "https://ecertificatewala.com",
      "https://proxyserver.com",
      "http://receptfritt-cialis.com",
      "https://www35.janeirodepromocao.com",
      "https://stixproject.github.io",
      "http://0fertas-do-dia-24hr-com.umbler.net",
      "http://clienteofertaoonline.com",
      "http://chase-2sconfirm.com",
      "http://inspireddds.com",
      "https://x0m0s.weblium.site",
      "https://t.co",
      "http://0fertas-do-dia-24hr-com.umbler.net",
      "http://www.sdmiramar.edu",
      "https://www35.janeirodepromocao.com",
      "http://inspireddds.com",
      "http://111.90.149.220",
      "annachapman3.icu",
      "adaptivecards.io",
      "smba.trafficmanager.net",
      "subarachnoid.slack.com/",
      "namecheap.com",
      "www.eizelulz.com",
      "jsonwhois.com",
      "subarachnoid.slack.com",
      "very.non.malicious.link.com",
      "hs-493391.t.myspot.net",
      "www.b",
      "hs-493391.t.hubspotemail.ne",
      "emea01.safelinks.protection.outlook.com",
      "foo.bar",
      "https://malware.scenarios.aiqscenarioinfra.com",
      "https://static.attackiq.com",
      ".www.foo.bar",
      "-a.b.co",
      "-error-.invalid",
      "a.b--c.de",
      "ru.wikipedia.org",
      "golang.org",
      "cisco.com",
      "api.telegram.org",
      "api.c2sec.com",
      "sitereview.bluecoat.com",
      "github.com",
      "demisto.com",
      "cloud.vmray.com",
      "circl.lu",
      "botvrij.eu",
      "misp-project.org",
      "provision.threatx.io",
      "organization.org@ozzy.qwer.de",
      "software995.net",
      "microsoft.com",
      "github.com",
      "demisto.com",
      "vmray.com",
      "amazonaws.com",
      "bit.ly",
      "cloaken.cypherint.com",
      "cypherint.com.",
      "compute.amazonaws.com",
      "example.com",
      "example.net",
      "queen.com",
      "test.com",
      "docs.pytest.org",
      "jetbrains.com",
      "plugins.jetbrains.com",
      "pipenv.readthedocs.io",
      "http://badguy.zz",
      "http://123-fake-api.com",
      "takedown.netcraft.com",
      "google.com",
      "paloaltonetworks.com",
      "api.blueliv.com",
      "activelist.model.v1.service.resource.manager.product.a",
      "blogs.msdn.microsoft.com",
      "api.recordedfuture.com",
      "dashboard.signalsciences.net",
      "freshdesk.com",
      "contributor-covenant.org",
      "egghead.io",
      "starlight.companyname.com",
      "schemas.xmlsoap.org",
      "algosec.com",
      "www.pharmacymall.net",
      "api.alphasoc.net",
      "alphasoc.com",
      "w3.org",
      "example.looker.com",
      "fontedevidaeterna.org.br",
      "1-pharm.com",
      "paypal-secure.online",
      "developers.redmarlin.ai",
      "box.com",
      "youtube.com",
      "localhost",
      "circl.lu",
      "http://hailataxii.com",
      "hybrid-analysis.com",
      "crowdstrike.com",
      "api.dnsdb.info",
      "api-us.logtrust.com",
      "api.giphy.com",
      "googleapis.com",
      "incapsula.com",
      "tools.ietf.org",
      "analyze.intezer.com",
      "ipinfo.io",
      "ws.isitphishing.org",
      "api.koodous.com",
      "developer.mozilla.org",
      "mimecast.com",
      "tenant.goskope.com",
      "openphish.com",
      "packetmail.net",
      "phish.ai",
      "phishtank.com",
      "proofpoint.co",
      "rapid7.com",
      "myurl.com",
      "a1000.reversinglabs.com",
      "ticloud-aws1-api.reversinglabs.com",
      "some_url.com",
      "api.shodan.io",
      "api.us2.sumologic.com",
      "help.sumologic.com",
      "en.wikipedia.org",
      "help.symantec.com",
      "utlsapi.com",
      "cloud.tenable.com",
      "developers.facebook.com",
      "graph.facebook.com",
      "lucene.apache.org",
      "twilio.com",
      "api.twilio.com",
      "urlscan.io",
      "ibm.com",
      "api.xforce.ibmcloud.com",
      "developer.zendesk.com",
      "api.zoom.us",
      "snapchat.com",
      "bangkoktailor.biz",
      "deepsightapi.symantec.com",
      "tinder.com",
      "console.aws.amazon.com",
      "censys.io",
      "api.meraki.com",
      "api.isightpartners.com",
      "confluence.atlassian.com",
      "developer.atlassian.com",
      "kloshpro.com",
      "hackedwebsite.com",
      "3fdzgtam4qk625n6.fi",
      "asdheguhadaasd.com",
      "bbc.co.uk",
      "developer.carbonblack.com",
      "falcon.crowdstrike.com",
      "cve.mitre.org",
      "stackoverflow.com",
      "gnu.org",
      "kb.tanium.com",
      "nltk.org",
      "worldbank.org.kg",
      "forums.news.cnn.com",
      "forums.bbc.co.uk",
      "256.1.1.1",
      "malformedurl.com",
      "gauttam.com",
      "investigate-api.readme.io",
      "3xqz5p387rui1hjtdv1up7lw-wpengine.netdna-ssl.com",
      "pdf995.com",
      "facebook.com",
      "cnn.com",
      "pdftesturl.com",
      "txttesturl.com",
      "doctesturl.com",
      "docxtesturl.com",
      "dem.com",
      "httpbin.org",
      "tutorialspoint.com",
      "sandbox-api.mimecast.com",
      "spam.com",
      "santoguia.net",
      "heckwassleftran2.ru",
      "exit.com",
      "postman-echo.com",
      "maokvo.eu",
      "go.getpostman.com",
      "lm.ddiworld.com",
      "dorsha.com",
      "nba.com",
      "biotecku.xyz",
      "coffeedoesgood.com",
      "vendretshirt.bid",
      "mxtoolbox.com",
      "goanywhere.com",
      "iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com",
      "dev.mysql.com",
      "viruswarehouse.com",
      "docs.docker.com",
      "brackets.io",
      "youtu.be",
      "funtranslations.com",
      "img.youtube.com",
      "api.pagerduty.com",
      "v2.developer.pagerduty.com",
      "api.abuseipdb.com",
      "abuseipdb.com",
      "data.alexa.com",
      "otx.alienvault.com",
      "archer-tech.com",
      "investigate.api.umbrella.com",
      "developer.ciscospark.com",
      "api.ciscospark.com",
      "cylance.com",
      "cymon.io",
      "api.cymon.io",
      "your_company.easyvista.com",
      "me.endgame.com",
      "oauth2.googleapis.com",
      "docs.software.hpe.com",
      "api.intsights.com",
      "docs.oasis-open.org",
      "logrhythm.com",
      "luminatepublicapi.docs.apiary.io",
      "elastic.co",
      "malwr.com",
      "geoip.maxmind.com",
      "kc.mcafee.com",
      "api.mxtoolbox.com",
      "developer.okta.com",
      "api.opsgenie.com",
      "api.passivetotal.org",
      "thumb.pipl.com",
      "api.pipl.com",
      "haveibeenpwned.com",
      "docs.bmc.com",
      "api.sndbox.com",
      "app.sndbox.com",
      "developer.salesforce.com",
      "virustotal.com",
      "api.redlock.io",
      "api.threatstream.com",
      "helpcenter.threatq.com",
      "help.github.com",
      "guides.github.com",
      "go.demisto.com",
      "packages.microsoft.com",
      "events.pagerduty.com",
      "docs.snowflake.net",
      "ico.org.uk",
      "smtpfox-cgpz7@foodhub.netventure.in",
      "https://www.google.co",
      "azop.hr",
      "cnil.fr",
      "cpdp.bg",
      "datainspektionen.se",
      "uoou.cz",
      "aki.ee",
      "dataprotection.ie",
      "dpa.gr",
      "dataprotection.gov.sk",
      "dataprotection.gov.mt",
      "privacycommission.be",
      "garanteprivacy.it",
      "naih.hu",
      "agpd.es",
      "dataprotection.ro",
      "dataprotection.gov.cy",
      "cnpd.pt",
      "ada.lt",
      "datatilsynet.dk",
      "autoriteitpersoonsgegevens.nl",
      "dsb.gv.at",
      "giodo.gov.pl",
      "bfdi.bund.de",
      "cnpd.lu",
      "arcsight.com",
      "canary.tool",
      "example.awake.cloud",
      "www.avanan.com",
      "cloud.bitdam.com",
      "blockade.io",
      "account.box.com",
      "regexr.com",
      "api.cloudlock.com",
      "protectapi.cylance.com",
      "protect.cylance.com",
      "portal-digitalshadows.com",
      "domaintools.com",
      "office365.com",
      "msdn.microsoft.com",
      "fireeye.com",
      "etp.us.fireeyegov.com",
      "testsafebrowsing.appspot.com",
      "icebrg.io",
      "vigilanteati.infoarmor.com",
      "jbxcloud.joesecurity.org",
      "api.kennasecurity.com",
      "analysis.lastline.com",
      "ebay.com",
      "schemas.microsoft.com",
      "api.example.luminatesec.co",
      "opendxl.github.io",
      "graph.microsoft.com",
      "demistobot.demisto.com",
      "login.microsoftonline.com",
      "demisto.managed-otrs.com",
      "packetsled.com",
      "gist.github.com",
      "threathq.com",
      "tc39.github.io",
      "api.protectwise.com",
      "app.recordedfuture.com",
      "demisto.my.redcanary.co",
      "a1000-server-name-or-ip",
      "ticloud-cdn-api.reversinglabs.com",
      "login.salesforce.com",
      "te.checkpoint.com",
      "api.secureworks.com",
      "company.service-now.com",
      "docs.servicenow.com",
      "client.webservice.sepm.symantec.com",
      "command.client.webservice.sepm.symantec.com",
      "api.monitoredsecurity.com",
      "monitoredsecurity.com",
      "api.threatconnect.com",
      "api.threatminer.org",
      "threatcrowd.org",
      "panacea.threatgrid.com",
      "api.trustar.co",
      "media.giphy.com",
      "api.securitycenter.windows.com",
      "exchange.xforce.ibmcloud.com",
      "demisto.zendesk.com",
      "admin.zscalertwo.net",
      "update.nai.com",
      "api.intelgraph.idefense.com",
      "demisto.atlassian.net",
      "malware.com",
      "circleci.com",
      "docs.python.org",
      "technet.microsoft.com",
      "osquery.readthedocs.io",
      "raw.githubusercontent.com",
      "fileformat.info",
      "urldefense.proofpoint.com",
      "unshorten.me",
      "wiki.servicenow.com",
      "easylist.github.io",
      "bugs.python.org",
      "publicsuffix.org",
      "docs.python-requests.org",
      "sample-videos.com",
      "go.microsoft.com",
      "phpclasses.org",
      "click.email.runrocknroll.com",
      "prov.core.ctp.secureworks.net",
      "medium.com",
      "malware.wicar.org",
      "support.virustotal.com",
      "en-us.secureconnection.moneytransaction.kb4.io",
      "api.github.com",
      "developer.pagerduty.com",
      "ps.compliance.protection.outlook.com",
      "user-images.githubusercontent.com",
      "desktop-style.de",
      "inky.com",
      "shared.outlook.inky.com",
      "chstarkeco.com",
      "democloud.countertack.com",
      "ctgold.in.net",
      ".okta.com",
      "pypi.org",
      "snapshots.mitmproxy.org",
      "host",
      "management.azure.com",
      "docs.microsoft.com",
      "auth.docker.io",
      "registry-1.docker.io",
      "gcr.io",
      "batticaloa.mc.gov.lk",
      "yahoo.com",
      "tufin.com",
      "test-address",
      "api.crowdstrike.com",
      "my.domain.com",
      "api.any.run",
      "api.ipstack.com",
      "ipstack.com",
      "antennahouse.com/purchase.htm",
      "antennahouse.com",
      "forescout.com",
      "beyondtrust.com",
      "api.perch.rocks",
      "app.perchsecurity.com",
      "myronnhammond.club",
      "ui.threatstream",
      "otx.alienvault.com",
      "archer-tech.com",
      "investigate.api.umbrella.com",
      "developer.ciscospark.com",
      "api.ciscospark.com",
      "cylance.com",
      "www.cymon.io",
      "api.cymon.io",
      "your_company.easyvista.com",
      "me.endgame.com",
      "oauth2.googleapis.com",
      "docs.software.hpe.com",
      "api.intsights.com",
      "docs.oasis-open.org",
      "www.logrhythm.com",
      "luminatepublicapi.docs.apiary.io",
      "www.elastic.co",
      "malwr.com",
      "geoip.maxmind.com",
      "kc.mcafee.com",
      "api.mxtoolbox.com",
      "developer.okta.com",
      "api.opsgenie.com",
      "api.passivetotal.org",
      "thumb.pipl.com",
      "api.pipl.com",
      "haveibeenpwned.com",
      "docs.bmc.com",
      "api.sndbox.com",
      "app.sndbox.com",
      "developer.salesforce.com",
      "www.virustotal.com",
      "api.redlock.io",
      "api.threatstream.com",
      "helpcenter.threatq.com",
      "help.github.com",
      "guides.github.com",
      "go.demisto.com",
      "packages.microsoft.com",
      "events.pagerduty.com",
      "docs.snowflake.net",
      "ico.org.uk",
      "www.azop.hr",
      "www.cnil.fr",
      "www.cpdp.bg",
      "www.datainspektionen.se",
      "www.uoou.cz",
      "www.aki.ee",
      "www.dataprotection.ie",
      "www.dpa.gr",
      "www.dataprotection.gov.sk",
      "www.dataprotection.gov.mt",
      "www.privacycommission.be",
      "www.garanteprivacy.it",
      "www.naih.hu",
      "www.agpd.es",
      "www.dataprotection.ro",
      "www.dataprotection.gov.cy",
      "www.cnpd.pt",
      "www.ada.lt",
      "www.datatilsynet.dk",
      "autoriteitpersoonsgegevens.nl",
      "www.dsb.gv.at",
      "www.giodo.gov.pl",
      "www.bfdi.bund.de",
      "www.cnpd.lu",
      "alphasoc.com",
      "model.v1.service.resource.manager.product.arcsight.com",
      "activelist.model.v1.service.resource.manager.product.arcsight.com",
      "ws.v1.service.resource.manager.product.arcsight.com",
      "help.canary.tools",
      "***.canary.tool",
      "autofocus.paloaltonetworks.com",
      "support.paloaltonetworks.com",
      "example.awake.cloud",
      "cloud.bitdam.com",
      "johnson.com",
      "www.blockade.io",
      "account.box.com",
      "regexr.com",
      "api.cloudlock.com",
      "protectapi.cylance.com",
      "protect.cylance.com",
      "portal-digitalshadows.com",
      "api.domaintools.com",
      "outlook.office365.com",
      "support.demisto.com",
      "msdn.microsoft.com",
      "blogs.msdn.microsoft.com",
      "etp.us.fireeye.com",
      "etp.us.fireeyegov.com",
      "etp.eu.fireeye.com",
      "accounts.google.com",
      "support.google.com",
      "safebrowsing.googleapis.com",
      "testsafebrowsing.appspot.com",
      "events.icebrg.io",
      "report.icebrg.io",
      "www.example.com",
      "vigilanteati.infoarmor.com",
      "jbxcloud.joesecurity.org",
      "api.kennasecurity.com",
      "analysis.lastline.com",
      "www.demisto.com",
      "www.ebay.com",
      "schemas.microsoft.com",
      "https://test.taxiistand.com",
      "https://www.us-cert.gov",
      "http://taxiiproject.github.io/",
      "http://taxii.mitre.org",
      "api.example.luminatesec.co",
      "opendxl.github.io",
      "graph.microsoft.com",
      "demistobot.demisto.com",
      "login.microsoftonline.com",
      "demisto.managed-otrs.com",
      "www.packetsled.com",
      "gist.github.com",
      "www.paloaltonetworks.com",
      "www.threathq.com",
      "tc39.github.io",
      "api.protectwise.com",
      "app.recordedfuture.com",
      "demisto.my.redcanary.co",
      "a1000-server-name-or-ip",
      "ticloud-cdn-api.reversinglabs.com",
      "login.salesforce.com",
      "te.checkpoint.com",
      "api.secureworks.com",
      "www.demisto.com",
      "https://usea1.sentinelone.net",
      "company.service-now.com",
      "docs.servicenow.com",
      "client.webservice.sepm.symantec.com",
      "command.client.webservice.sepm.symantec.com",
      "api.monitoredsecurity.com",
      "www.monitoredsecurity.com",
      "api.threatconnect.com",
      "api.threatminer.org",
      "www.threatcrowd.org",
      "panacea.threatgrid.com",
      "api.trustar.co",
      "media.giphy.com",
      "wildfire.paloaltonetworks.com",
      "api.securitycenter.windows.com",
      "exchange.xforce.ibmcloud.com",
      "demisto.zendesk.com",
      "admin.zscalertwo.net",
      "update.nai.com",
      "api.intelgraph.idefense.com",
      "demisto.atlassian.net",
      "malware.com",
      "circleci.com",
      "docs.python.org",
      "technet.microsoft.com",
      "osquery.readthedocs.io",
      "raw.githubusercontent.com",
      "www.fileformat.info",
      "urldefense.proofpoint.com",
      "unshorten.me",
      "wiki.servicenow.com",
      "example.com",
      "easylist.github.io",
      "bugs.python.org",
      "publicsuffix.org",
      "docs.python-requests.org",
      "www.sample-videos.com",
      "go.microsoft.com",
      "www.phpclasses.org",
      "click.email.runrocknroll.com",
      "prov.core.ctp.secureworks.net",
      "medium.com",
      "malware.wicar.org",
      "support.virustotal.com",
      "en-us.secureconnection.moneytransaction.kb4.io",
      "api.github.com",
      "developer.pagerduty.com",
      "ps.compliance.protection.outlook.com",
      "user-images.githubusercontent.com",
      "inky.com",
      "shared.outlook.inky.com",
      "chstarkeco.com",
      "democloud.countertack.com",
      "ctgold.in.net",
      ".okta.com",
      "pypi.org",
      "snapshots.mitmproxy.org",
      "host",
      "management.azure.com",
      "docs.microsoft.com",
      "auth.docker.io",
      "registry-1.docker.io",
      "gcr.io",
      "www.batticaloa.mc.gov.lk",
      "www.yahoo.com",
      "www.batticaloa.mc.gov.lk",
      "www.tufin.com",
      "test-address",
      "api.crowdstrike.com",
      "my.domain.com",
      "docs.snowflake.net",
      "my.domain.com",
      "docs.snowflake.net",
      "ec2-18-197-54-7.eu-central-1.compute.amazonaws.com",
      "api.any.run",
      "docs.snowflake.net",
      "api.ipstack.com",
      "ipstack.com",
      "www.antennahouse.com",
      "www.forescout.com",
      "www.beyondtrust.com",
      "securitycenter.windows.com",
      "otx.alienvault.com",
      "archer-tech.com",
      "investigate.api.umbrella.com",
      "developer.ciscospark.com",
      "api.ciscospark.com",
      "cylance.com",
      "www.cymon.io",
      "api.cymon.io",
      "your_company.easyvista.com",
      "me.endgame.com",
      "oauth2.googleapis.com",
      "docs.software.hpe.com",
      "api.intsights.com",
      "docs.oasis-open.org",
      "www.logrhythm.com",
      "luminatepublicapi.docs.apiary.io",
      "www.elastic.co",
      "malwr.com",
      "geoip.maxmind.com",
      "kc.mcafee.com",
      "api.mxtoolbox.com",
      "developer.okta.com",
      "api.opsgenie.com",
      "api.passivetotal.org",
      "thumb.pipl.com",
      "api.pipl.com",
      "haveibeenpwned.com",
      "docs.bmc.com",
      "api.sndbox.com",
      "app.sndbox.com",
      "developer.salesforce.com",
      "www.virustotal.com",
      "api.redlock.io",
      "api.threatstream.com",
      "helpcenter.threatq.com",
      "help.github.com",
      "guides.github.com",
      "go.demisto.com",
      "packages.microsoft.com",
      "events.pagerduty.com",
      "docs.snowflake.net",
      "ico.org.uk",
      "www.azop.hr",
      "www.cnil.fr",
      "www.cpdp.bg",
      "www.datainspektionen.se",
      "www.uoou.cz",
      "www.aki.ee",
      "www.dataprotection.ie",
      "www.dpa.gr",
      "www.dataprotection.gov.sk",
      "www.dataprotection.gov.mt",
      "www.privacycommission.be",
      "www.garanteprivacy.it",
      "www.naih.hu",
      "www.agpd.es",
      "www.dataprotection.ro",
      "www.dataprotection.gov.cy",
      "www.cnpd.pt",
      "www.ada.lt",
      "www.datatilsynet.dk",
      "autoriteitpersoonsgegevens.nl",
      "www.dsb.gv.at",
      "www.giodo.gov.pl",
      "www.bfdi.bund.de",
      "www.cnpd.lu",
      "alphasoc.com",
      "model.v1.service.resource.manager.product.arcsight.com",
      "activelist.model.v1.service.resource.manager.product.arcsight.com",
      "ws.v1.service.resource.manager.product.arcsight.com",
      "help.canary.tools",
      "***.canary.tool",
      "autofocus.paloaltonetworks.com",
      "support.paloaltonetworks.com",
      "example.awake.cloud",
      "cloud.bitdam.com",
      "www.blockade.io",
      "account.box.com",
      "regexr.com",
      "api.cloudlock.com",
      "protectapi.cylance.com",
      "protect.cylance.com",
      "portal-digitalshadows.com",
      "api.domaintools.com",
      "outlook.office365.com",
      "support.demisto.com",
      "msdn.microsoft.com",
      "blogs.msdn.microsoft.com",
      "api.zerofox.com",
      "etp.us.fireeye.com",
      "etp.us.fireeyegov.com",
      "etp.eu.fireeye.com",
      "accounts.google.com",
      "support.google.com",
      "safebrowsing.googleapis.com",
      "testsafebrowsing.appspot.com",
      "events.icebrg.io",
      "report.icebrg.io",
      "www.example.com",
      "vigilanteati.infoarmor.com",
      "jbxcloud.joesecurity.org",
      "api.kennasecurity.com",
      "analysis.lastline.com",
      "www.demisto.com",
      "www.ebay.com",
      "schemas.microsoft.com",
      "api.example.luminatesec.co",
      "opendxl.github.io",
      "graph.microsoft.com",
      "demistobot.demisto.com",
      "login.microsoftonline.com",
      "demisto.managed-otrs.com",
      "www.packetsled.com",
      "gist.github.com",
      "www.paloaltonetworks.com",
      "www.threathq.com",
      "tc39.github.io",
      "api.protectwise.com",
      "app.recordedfuture.com",
      "demisto.my.redcanary.co",
      "a1000-server-name-or-ip",
      "ticloud-cdn-api.reversinglabs.com",
      "login.salesforce.com",
      "te.checkpoint.com",
      "api.secureworks.com",
      "www.demisto.com",
      "company.service-now.com",
      "docs.servicenow.com",
      "client.webservice.sepm.symantec.com",
      "command.client.webservice.sepm.symantec.com",
      "api.monitoredsecurity.com",
      "www.monitoredsecurity.com",
      "api.threatconnect.com",
      "api.threatminer.org",
      "www.threatcrowd.org",
      "https://host",
      "panacea.threatgrid.com",
      "api.trustar.co",
      "media.giphy.com",
      "wildfire.paloaltonetworks.com",
      "api.securitycenter.windows.com",
      "exchange.xforce.ibmcloud.com",
      "demisto.zendesk.com",
      "admin.zscalertwo.net",
      "update.nai.com",
      "api.intelgraph.idefense.com",
      "demisto.atlassian.net",
      "malware.com",
      "circleci.com",
      "docs.python.org",
      "technet.microsoft.com",
      "osquery.readthedocs.io",
      "raw.githubusercontent.com",
      "www.fileformat.info",
      "urldefense.proofpoint.com",
      "unshorten.me",
      "wiki.servicenow.com",
      "example.com",
      "easylist.github.io",
      "bugs.python.org",
      "publicsuffix.org",
      "docs.python-requests.org",
      "www.sample-videos.com",
      "go.microsoft.com",
      "www.phpclasses.org",
      "click.email.runrocknroll.com",
      "prov.core.ctp.secureworks.net",
      "medium.com",
      "malware.wicar.org",
      "support.virustotal.com",
      "en-us.secureconnection.moneytransaction.kb4.io",
      "api.github.com",
      "developer.pagerduty.com",
      "ps.compliance.protection.outlook.com",
      "user-images.githubusercontent.com",
      "inky.com",
      "shared.outlook.inky.com",
      "chstarkeco.com",
      "democloud.countertack.com",
      "ctgold.in.net",
      ".okta.com",
      "pypi.org",
      "alexa.com",
      "snapshots.mitmproxy.org",
      "host",
      "management.azure.com",
      "docs.microsoft.com",
      "auth.docker.io",
      "registry-1.docker.io",
      "gcr.io",
      "www.batticaloa.mc.gov.lk",
      "www.yahoo.com",
      "www.batticaloa.mc.gov.lk",
      "www.tufin.com",
      "test-address",
      "api.crowdstrike.com",
      "my.domain.com",
      "docs.snowflake.net",
      "my.domain.com",
      "docs.snowflake.net",
      "ec2-18-197-54-7.eu-central-1.compute.amazonaws.com",
      "api.any.run",
      "docs.snowflake.net",
      "not@domain.com",
      "support@threatx.com",
      "api.ipstack.com",
      "ipstack.com",
      "www.antennahouse.com/purchase.htm",
      "www.antennahouse.com",
      "www.forescout.com",
      "www.beyondtrust.com",
      "securitycenter.windows.com",
      "oproxy-dev.demisto.ninja",
      "oproxy.demisto.ninja",
      "mock.com",
      "msn.com",
      "openxmlformats.org",
      "https://urlhaus-api.abuse.ch",
      "https://vulndb.cyberriskanalytics.com",
      "https://mock.com",
      "http://www.msn.com",
      "http://schemas.openxmlformats.org",
      "http://upper-int.ru",
      "walla.com",
      "splunkbase.splunk.com",
      "extrahop.com",
      "polyswarm.network",
      "api.polyswarm.network",
      "polyswarm-fake-api.com",
      "wiki.openoffice.org",
      "nowhere.com",
      "somewhere.com",
      "cla-assistant.io",
      "urldefense.com",
      "twitter.com",
      "blogspot.com",
      "nintendo.com",
      "hub.docker.com",
      "https://docs.splunk.com",
      "strftime.org",
      "walla.com",
      "www.securityadvisor.io",
      "fp.tools",
      "www.securityadvisor.io",
      "https://integration.cybereason.net",
      "https://m2crypto.readthedocs.io",
      "https://raw.user.com",
      "platform.risksense",
      "https://attack.mitre.org",
      "https://mytenant.blueliv.com",
      "https://api.dehashed.com",
      "https://www.dehashed.com.",
      "https://www.atlassian.com",
      "https://gitlab-ci-token",
      "paloaltonetworks.local",
      "https://debian.neo4j.com"
    ],
    "md5": [
      "c8092abd8d581750c0530fa1fc8d8318",
      "d1e09edea866f35738ab48893603a025",
      "6a95d3d00267c9fd80bd42122738e726",
      "05ed91daa77ff31f7f4e61314c2a3122",
      "0cc175b9c0f1b6a831c399e269772661",
      "df9d0ca7409a2967bb338014b043a062",
      "36bd4be7042f6de7e332c05cef287d05",
      "03ff1fb5d3fe765a20280754b4be04ce",
      "be0975d3ae691cf77f4f0952e791a0fb",
      "4ae027b246528y357r1a01e9cdf55724",
      "00112233445566778899aabbccddeeff",
      "4F83C01E8F7507D23C67AB085BF79E97",
      "00112233445566778899aabbccddeeff",
      "4778901e54f55d54435b2626923054a8"
    ],
    "sha1": [
      "52483514f07eb14570142f6927b77deb7b4da99f",
      "2492a18532745251fbc5daf7160daa49b90dbbe1",
      "df2efa060e335f97628ca39c9fef5469ab3cb837",
      "f06f909f532683fe62feed4481b4b36067e807be"
    ],
    "sha256": [
      "3fbdc4195b66297eaa4168ad6ded010c47eaea57496b6cc1ccfa34c9579d21562451d1269c7412e31e926cbb7c50ffc160a6493f4a8df0235ecd3ea2c9bfddb5",
      "42a5e275559a1651b3df8e15d3f5912499f0f2d3d1523959c56fc5aea6371e59",
      "503ca1a4fc0d48b18c0336f544ba0f0abf305ae3a3f49b3c2b86b8645d6572dc",
      "75779e62f9790bd4c2ed449bd20be741f78811fb5ce848a2c5a516af17cdeccf",
      "ba8b644d5b7cdc28c99b3aa35bccf9098b2cdd366cc57200050ecf17e86fe561",
      "2e6d76b398ef59f3041ef7eb30060a787e3c8d594747ed08b096d7eab608682d",
      "666a8dbc172bcf7cd698bf95e5b58de17535121fed7de5ce1349db4446a1fa5c",
      "42dfb222ce97c7517bc0b6333a1881bfa91539f457d261e6626d662995b97df5",
      "5da547e87d6ef12349fb4dbba9cf3146a358e284f72361dd07bbabfc95b0bac3",
      "fcb42f8e4ccb55ee2920da64c7834575875012d89ff260ee318db5054e6e1019",
      "56cdfe418592b3fd68cea60da9689fb51a9bd90409b747d02fa08ed90db81e37",
      "cb57e263ab51f8e9b40d6f292bb17512cec0aa701bde14df33dfc06c815be54c",
      "ebb031c3945e884e695dbc63c52a5efcd075375046c49729980073585ee13c52",
      "b2ac43820cdf8634e1a437b9723ec110513d3dd7a2f8d4fa3192babe3eaa4b8e",
      "2d8bb37078ff9efd02d9361975c9e625ae56bd8a8a65d50fc568341bc88392ae",
      "10676cf66244cfa91567fbc1a937f4cb19438338b35b69d4bcc2cf0d3a44af5e",
      "ad53660b6d7e8d2ed14bd59b39e1f265148e3c6818a494cce906e749976bade1"
    ],
    "ssdeep": [
      "48:uuHYx6sS1bioEX7gyLatSqAc8kHRgd5peJB80t9qeM:uuHYx6sS1bUJBqus8v9",
      "6:lR393QRG7+IKG7gofyG7FVZOxIT5elQKG70WBAXXU:9DSIdUo9JVZOIWQdAWwE",
      "768:p7xinhxznvj8cc1rbxdo0zekxud3cdpjxb7mnmdzkukmkzqbftikkazte:yht8c+fuiohq1kefoa7",
      "768:p7xinhxznvj8cc1rbxdo0zekxud3cdpjxb7mnmdzkukmkzqbftikkazt6:yht8c+fuiohq1kefoa8",
      "384:mzawcK1gOUqJMpMhE5yOaF0O9TwFExCZkUf6H+PknKV+rXkrsH/CxEdubVAjMPW4:AiMVWcK9AhrDNEf"
    ],
    "emails": [
      "changed-files@v35.1.0",
      "action@v3.0.0",
      "slack-github-action@v1.23.0",
      "dbot@demisto.works",
      "37b6d02m-63e0-495e-kk92-7c21511adc7a@SB2APC01FT091.outlook.com",
      "user@u-MacBook-Pro-2.local",
      "root@u-MacBook-Pro-2.local",
      "dummy@recipient.com",
      "dummyBCC@recipient.com",
      "dummyCC@recipient.com",
      "dummy1@rec.com",
      "dummy2@rec.com",
      "dummy3@rec.com",
      "john@doe.com",
      "DB6PR0701MB2999AE7B65DE2E394ACDC802CF669@DB6PR0701MB2999.eurprd07.prod.outlook.com",
      
      "support@adobe.com",
      "test@adobe.com",
      "ISO@dds.ca.gov",
      "support@slashnext.com",
      "cool_user@coolorg.com",
      "johnnydepp@gmail.com",
      "image003.gif@01CF4D7F.1DF62650",
      "2cbad0d78c624400ef83a5750534448g@thread.skype",
      "67pd3967e74g45f28d0c65f1689132bb@thread.skype",
      "67pd3967e74g45f28d0c65f1689132bo@thread.skype",
      "21f27jk08d1a487fa0f5467779619827@thread.skype",
      "2cbad0d78c624400ef83a5750539998g@thread.skype",
      "teamsApp@odata.bind",
      "owners@odata.bind",
      "members@odata.bind",
      "bwillis@email.com",
      "dwashinton@email.com",
      "glenda@south.oz.coven",
      "perikles@acropoli.com",
      "2222@evil.zz",
      "bruce.wayne@pharmtech.zz",
      "1111@evil.zz",
      "lol@hotmail.com",
      "badguy@evil.zz",
      "e99d7ed5580193f36a51f597bc2c0210@evil.zz",
      "5be9245893ff486d98c3640879bb2657.protect@whoisguard.com",
      "\"e99d7ed5580193f36a51f597bc2c0210@evil.zz\",",
      "9facbf452def2d7efc5b5c48cdb837fa@badguy.zz",
      "clark.kent@pharmtech.zz",
      "<bruce.wayne@university-of-education.zz>\",",
      "diana.prince@pharmtech.zz",
      "\"bruce.wayne@university-of-education.zz\"",
      "bruce.wayne@university-of-education.zz",
      "support@threatx.com.",
      "joe@gmail.com",
      "foo@test.com",
      "5c530c1b.1c69fb81.bd826.0eff@mx.google.com",
      "vikramarsid@gmail.com",
      "woo@demisto.com",
      "doo@demisto.com",
      "soso@demisto.com",
      "koko@demisto.com",
      "momo@demisto.com",
      "foo@demisto.com",
      "wowo@demisto.com",
      "goo@demisto.com",
      "content-test-service-acc@content-test-236508.iam.gserviceaccount.com",
      "ada@ada.lt",
      "datainspektionen@datainspektionen.se",
      "https://www.ip-rs.si",
      "anspdcp@dataprotection.ro",
      "commission@privacycommission.be",
      "dsb@dsb.gv.at",
      "peterfalvi.attila@naih.hu",
      "poststelle@bfdi.bund.de",
      "contact@dpa.gr",
      "garante@garanteprivacy.it",
      "https://gdpr-info.eu",
      "kzld@cpdp.bg",
      "info@aki.ee",
      "dt@datatilsynet.dk",
      "commissioner.dataprotection@gov.mt",
      "posta@uoou.cz",
      "statny.dozor@pdp.gov.sk",
      "info@dataprotection.ie",
      "gp.ip@ip-rs.si",
      "international.team@ico.org.uk",
      "geral@cnpd.pt",
      "contact20@edoeb.admin.ch",
      "info@dvi.gov.lv",
      "tietosuoja@om.fi",
      "azop@azop.hr",
      "http://www.tietosuoja.fi",
      "postur@personuvernd.is",
      "desiwm@giodo.gov.pl",
      "internacional@agpd.es",
      "http://www.dvi.gov.lv",
      "info@autoriteitpersoonsgegevens.nl",
      "info@cnpd.lu",
      "commissioner@dataprotection.gov.cy",
      "postkasse@datatilsynet.no",
      "info.dss@llv.li",
      "E2831654DAE4B545854ACEE617A297E3@namprd11.prod.outlook.com",
      "C718CB8A-E78C-4EA8-AB24-61B8DCD8C8D4@demisto.com",
      "e3ae306e-13d7-4d19-ab84-a182205d07e6@demisto.com",
      "77069121-c854-4ca3-abc0-c98d010a8209@demisto.com",
      "2fc50179-3666-4770-a365-744882cda54c@demisto.com",
      "dns-admin@google.com",
      "hostmaster@charter.com",
      "donotdelete@demisto.ninja",
      "example@example.com",
      "admin@google.com",
      "william19770319@yahoo.com",
      "splunk@placeholder.com",
      "sentinel@placeholder.com",
      "nexpose@placeholder.com",
      "jane@acme.com",
      "dave@acme.com",
      "john@acme.com",
      "rajguru2003@yahoo.com",
      "jondoe@acme.com",
      "dns@google.com",
      "ciscosparktestmail@gmail.com",
      "mail1@gmail.com",
      "mail2@yahoo.com",
      "mail3@aol.com",
      "20070126151203.186470@example.com",
      "forme@kanhseai.com",
      "trump@usa.com",
      "test@this.com",
      "johnd@acme.com",
      "foo@demi.com",
      "info@demisto.com",
      "this.is@email.format",
      "test@email.com",
      "support@crowdstrike.com",
      "support@cybertriage.com",
      "example@gmail.com",
      "example@demisto.com",
      "someuser@example.com",
      "joe@example.com",
      "john@domain.com",
      "noreply@demisto.com",
      "somerandomemail@nodomain.net",
      "bob@demisto.int",
      "john@mypersonalblog.com",
      "incapsulaupdates@demisto.com",
      "demistodev.com",
      "anar@demisto.com",
      "userthatdoesnotexist2@demisto.com",
      "userthatdoesnotexist@demisto.com",
      "userthatdoesnotexist4@demisto.com",
      "userthatdoesnotexist3@demisto.com",
      "user1@domain.com",
      "user2@domain.com",
      "user3@domain.com",
      "user4@domain.com",
      "user5@domain.com",
      "user6@domain.com",
      "user7@domain.com",
      "user8@domain.com",
      "user9@domain.com",
      "mailonline_16@filposcv.com",
      "test@demisto.com",
      "buildtests@demisto.int",
      "demistoadmin@demisto.int",
      "demistoadmin@demist0.int",
      "meir@demisto.com",
      "30CCD2D7744B2545A0B6B8F81416BF4D02517525@example.com",
      "8504be6f440847ce988eae64585c1012@win-micmsoee1bu.demisto.int",
      "block_test@gmail.com",
      "bark@demisto.com",
      "yarden@demisto.com",
      "mimecast@demistolab.com",
      "yaakovi@demisto.com",
      "shachar@demisto.com",
      "clark.kent@example.com",
      "full.email.available@business.subscription",
      "yulu@demisto.com",
      "dudu@demisto.com",
      "dl1@demisto.int",
      "dem174861@demisto.int",
      "686f5e7079420d45a24ed508c0243ca1@namprd11.prod.outlook.com",
      "66b5d74754e5bf43928b4c90da47ef62@namprd11.prod.outlook.com",
      "c937033b-6710-4591-a1b1-097bb920c304@demisto.com",
      "rony@demisto.com",
      "co2pr10mb00699eba2675af58bf44f976d20d0@co2pr10mb0069.namprd10.prod.outlook.com",
      "rony@cc-inkyphishfence.com",
      "4dfc20a7248e604eab2099657668b271@namprd11.prod.outlook.com",
      "387b546d-75b7-4e42-90e7-cc896f594481@demisto.com",
      "3181b655-1ccf-461c-9d19-400f631b1a23@demisto.com",
      "2c265309-5dd5-492e-898d-ea03ef09dcc8@demisto.com",
      "b927e7a67c010a4a8773224416ad5c98@namprd11.prod.outlook.com",
      "241b3f12-6f4a-41c2-ab57-6e32c28b1324@demisto.com",
      "sn2pr10mb0096e3a7399c5af1ee9dafccd20c0@sn2pr10mb0096.namprd10.prod.outlook.com",
      "sn1pr11mb0638e0fe698bfe52f27748a8cc970@sn1pr11mb0638.namprd11.prod.outlook.com",
      "sn1pr11mb0638d849680e1325bc4f7951cc970@sn1pr11mb0638.namprd11.prod.outlook.com",
      "idov@demisto.com",
      "bar.hochman@demisto.com",
      "disco-team@stealthemail.com",
      "powershellteam@hotmail.com",
      "https://support.microsoft.com",
      "CAJaFoefy_acEKaqSMGfojbLzKoUnzfpPcnNemuD6K0oQZ2PikQ@mail.gmail.com",
      "example1@example.com",
      "example2@example.com",
      "example3@example.com",
      "junk.name@avbaa.com",
      "vikramarsid@gmail.com",
      "git@github.com",
      "emojiemail@xn--i-7iq.com",
      "example@lol_lol.lol.com",
      "a@a.co.il",
      "JUSTAREASONABLEADDRESS@mail-out.nom.nom-mon.net",
      "test@test.com",
      "5b4831d0-5322-ea23-6312-864ff419a1f1@test.com",
      "content-test-service-acc@content-test-236508.iam.gserviceaccount.com",
      "https://caseapi.phishlabs.com",
      "https://ioc.phishlabs.com",
      "5b4831d0-5322-ea23-6312-864ff419a1f1@test.com",
      "test@test.com",
      "geverwithnoname@domainthatdoesntexist.co.uk",
      "demistodev.onmicrosoft.com",
      "5b4831d0-5322-ea23-6312-864ff419a1f1@test.com",
      "jack@AssasinsForRent.com",
      "tatimouzo1@aliceadsl.fr",
      "demisto_user@company.net",
      "filterme@nowhere.com",
      "nobody@demistotest.com",
      "tatimouzo1@aliceadsl.fr",
      "track@securityadvisor.io",
      "support@securityadvisor.io",
      "dummysender@works.com",
      "qicifomuejijika@o2.pl",
      "mobi777@gmail.com",
      "https://docs.splunk.com",
      "001toxic@gmail.com",
      "https://partner.analystplatform.com",
      "https://partner.cloud.analyst1.com"
    ],
    "false_positives": [
      "http://3628126748",
      "56.1.4.194",
      "10.64.49.14",
      "6.9.1.219",
      "t2.txt@xxx.zzz",
      "t1.txt@xxx.yyy",
      "s@a.com",
      "9d4f::1548",
      "1.0.0.91",
      "::1980",
      "::6769",
      "2000::",
      "1.0.0.75",
      "dc2c::1554",
      "trans_dict=FILE_CATALOG_TRANS_DICT",
      "trans_dict=FILE_RULE_TRANS_DICT",
      "devtesting/readpdf:1.0.0.1557734470"
    ]
  },
  "generic_strings": [
    "demisto-sdk",
    "7e6LEbF8BABCfA-dlp1rl1A==",
    "#queue-placeholder/containers/1",
    "pkg_dev_container_setup.sh",
    "o365-api",
    "latest",
    "SlashNext.URL",
    "os.environ",
    "onPremisesSyncEnabled",
    "max_depth_const-max_depth",
    "self.conf_json_validator",
    "self.IMAGE_MAX_SIZE:",
    "arcsight_esm_fixes.yml",
    "test_data/dont_open-malicios.eml",
    "test_data/DONT_OPEN-MALICIOUS.eml",
    "DONT_OPEN-MALICIOUS.eml",
    "ptypmult",
    "community",
    "files",
    "string",
    "regex",
    "tests",
    "documentation",
    "false",
    "instance",
    "integration",
    "circle",
    "file_path",
    "data:image/",
    "email",
    "server",
    "commit",
    "branch",
    "context",
    "entry",
    "args.",
    "table",
    "markdown",
    "timeline",
    "request",
    "content",
    "format",
    "readable",
    "indicator",
    "version",
    "protocol",
    "upload",
    "sample",
    "order",
    "report",
    "value",
    "accept",
    "application",
    "session",
    "warning",
    "disable",
    "block",
    "verify",
    "domain",
    "demisto",
    "support",
    "github",
    "event",
    "label",
    "stream",
    "default",
    "incident",
    "timestamp",
    "number",
    "hashes",
    "detect",
    "address",
    "resolution",
    "communicate",
    "download",
    "duration",
    "status",
    "shell",
    "office",
    "microsoft",
    "system",
    "automation",
    "search",
    "action",
    "cache",
    "crypto",
    "virtual",
    "python",
    "exchange",
    "playbook",
    "object",
    "private",
    "funcs",
    "write",
    "array",
    "final",
    "category",
    "vulnerability",
    "service",
    "suffix",
    "include",
    "activity",
    "group",
    "policy",
    "computer",
    "_file",
    "threat",
    "defense",
    "lookup",
    "attribute",
    "filter",
    "specification",
    "template",
    "client",
    "update",
    "access",
    "login",
    "profile",
    "attach",
    "second",
    "archive",
    "subscribe",
    "rawjson",
    "end_point",
    "username",
    "password",
    "transform",
    "token",
    "signature",
    "current",
    "monitor",
    "soapenv",
    "count",
    "response",
    "dashboard",
    "count",
    "yyyy-mm-dd't'hh:mm:ss",
    "fetch",
    "build",
    "encoding",
    "command",
    "display",
    "method",
    "logout",
    "dictionary",
    "level",
    "mapping",
    "module",
    "keyword",
    "field",
    "push(",
    "deploy",
    "config",
    "winter",
    "example",
    "malicious",
    "threshold",
    "minutes",
    "start",
    "schema",
    "execute",
    "result",
    "connect",
    "endpoint",
    "query",
    "params",
    "directory",
    "desktop",
    "timeout",
    "modifier",
    "submit",
    "pagination",
    "create",
    "screen",
    "append",
    "delete",
    "secure",
    "socket",
    "breach",
    "summary",
    "legacy",
    "document",
    "marked",
    "primary",
    "record",
    "types",
    "notify",
    "trigger",
    "detail",
    "discover",
    "folder",
    "destination",
    "complete",
    "tasks",
    "security",
    "firewall",
    "global",
    "rules",
    "headers",
    "ascending",
    "thumbnail",
    "operator",
    "categories",
    "deprecated",
    "credentials",
    "unicode",
    "decode",
    "base64",
    "provider",
    "generic",
    "machine",
    "range",
    "investigation",
    "source",
    "function",
    "snapshot",
    "custodian",
    "store",
    "exist",
    "detonate",
    "smart",
    "phone",
    "theft",
    "external",
    "removeable",
    "media",
    "storage",
    "device",
    "occurre",
    "digital",
    "asset",
    "compliant",
    "blacklist",
    "privacy",
    "compliance",
    "sites",
    "alerts",
    "protect",
    "vulnerable",
    "underscore",
    "capital",
    "native",
    "component",
    "alias",
    "subject",
    "knowledge",
    "unresolve",
    "pathfinder",
    "hostbyname",
    "history",
    "alarm",
    "comment",
    "charset",
    "question",
    "captcha",
    "output",
    "condition",
    "constant",
    "environment",
    "variable",
    "konfigurator",
    "optional",
    "trace",
    "additional",
    "properties",
    "pagesize",
    "envelope",
    "entries",
    "return",
    "idonly",
    "direction",
    "equal",
    "restriction",
    "mailbox",
    "traversal",
    "greater",
    "authentication",
    "social",
    "network",
    "endtime",
    "period",
    "certificate",
    "replace",
    "enrichment",
    "malware",
    "organization",
    "state",
    "province",
    "issue",
    "reload",
    "deliver",
    "message",
    "clicks",
    "permitted",
    "proxies",
    "scheduled",
    "extensive",
    "spread",
    "localized",
    "database",
    "concentrator",
    "broker",
    "fileedit",
    "index",
    "language",
    "shutdown",
    "users",
    "cancel",
    "validate",
    "received",
    "license",
    "categorization",
    "class",
    "health",
    "customer",
    "miscellaneous",
    "active",
    "queued",
    "pending",
    "resolved",
    "exclusion",
    "authenticate",
    "assigned",
    "organization",
    "person",
    "first",
    "reputation",
    "appliance",
    "admin",
    "backup",
    "previous",
    "sibling",
    "critical",
    "medium",
    "register",
    "again",
    "repeat",
    "times",
    "selector",
    "schedule",
    "datetime",
    "behaviour",
    "remote",
    "article",
    "volume",
    "encode",
    "generate",
    "sensor",
    "weekly",
    "interval",
    "hosts",
    "setting",
    "launch",
    "parse",
    "check",
    "error",
    "restrict",
    "modified",
    "hostid",
    "retrieve",
    "specific",
    "regards",
    "otherwise",
    "severity",
    "comparison",
    "subnet",
    "duplicate",
    "general",
    "analysis",
    "warroom",
    "thread",
    "topic",
    "reply",
    "length",
    "campaign",
    "correlation",
    "offense",
    "inputs",
    "published",
    "owner",
    "trust",
    "delegation",
    "encrypt",
    "allow",
    "trust",
    "divide",
    "description",
    "short",
    "performance",
    "modify",
    "process",
    "fixed",
    "listen",
    "suspicious",
    "autorun",
    "prepare",
    "phishing",
    "repository",
    "product",
    "mailto",
    "hostname",
    "locale",
    "month",
    "hours",
    "extractor",
    "extension",
    "assign",
    "servation",
    "iso-8859-1",
    "utf-8",
    "working",
    "sticky",
    "cloud",
    "exception",
    "route53",
    "aws-iam",
    "bucket",
    "::1980",
    "user/itai",
    "patch",
    "alpha",
    "circl",
    "watchlist",
    "binary",
    "cisco-umbrella-test",
    "reason",
    "dnsdb-",
    "project",
    "safebrowsing",
    "vigilanteati",
    "esm-v10",
    "policies",
    "control",
    "managed",
    "nessusscan",
    "packets",
    "nullbytechars",
    "twenty-one",
    "remove",
    "urgency",
    "reconciliation",
    "reversing",
    "::6769",
    "whitelist",
    "infinity",
    "precision",
    "extract",
    "2016-jan-30",
    "repositories",
    "engine",
    "secret",
    "employee",
    "escape",
    "dae6720d-0588-d23b-c006-63cf1134537b",
    "37221925980c05deefac014f9a72b4765e716341",
    "a7561571-c786-4fb7-93d0-e2f2c74c190d",
    "jmyetnrhk96lktrshfdghj74",
    "0anbmmsawjnw2uk9pva",
    "aamkagi5mzaxmtrhltyxndktngqwyy05yzvjltayyzm1zdcxmtllmwbgaaaaaaa9nafsckt6t4m34vxa7rpjbwcgpd7igmvysiukpo18vjclaaaaaaenaacgpd7igmvysiukpo18vjclaaahca3jaaa=",
    "enpnj11vgjayhf9lr3vrc-ut3jndp-cci5sxs0hbiqk0lfdierp_vjkzj_tznuece2q16hpd5micnk8vju0pd8vhbvrdhzbbwnzmfkkfbnfhvlpiiqj47yw5nabaxk2sy7dasktx8zqfrnxynekmrpncvk0eoazqnnlwdvkiie2qaosec0ltjbzongpf9trvr229ud2lijnhwymoai1dfosyjcsazcr5foyhjscwcleeqhltegjoyipjhudxjgpjucoojpwqtpyowhqply3yayzjxbvdof_6oqzol8nqob4vuaiyh0nxda2rjw5unwsfmt0v52qkwphane6h-3z5pva6acvavydecl71jb5ez0nzzli_wu_ejelw2tzpxpcxxzggaiy-vwdihnh9",
    "enolj01vgkaqhv_ljj0txv0qdoutamnaymugrr5mco4olgc7hq8etp97sc5hjnms98m8v9sbgloonflrcb7-mf17jz8_v5sxmn-d3fe4f41hfkgqpzj8xrnip-bnu7ifzrwlk747udhyjd2koi8mcladxzefoba2gi69rcbmzk3kacfpiinheqmbfdytxhigslgw6qmlli5qeut7bx7ikk-vnxhtdsqo0ojwn-lu1knftntvlldgbc627qmz1hxacjwumkmxnjhb3ph_mj76qd5x0otppjjyqypyvn2x4730y5klbxs6c7p17yzcsjldjyrmtgsd0t20dz0rqmdccbf9_gg8al8l",
    "c7d68ad5mxtoolbox_test",
    "731a8e52-3ea6-a291-ec0a-d2ff0619c19d7bd788d6be818b65",
    "aamkagi5mzaxmtrhltyxndktngqwyy05yzvjltayyzm1zdcxmtllmwbgaaaaaaa9nafsckt6t4m34vxa7rpjbwcgpd7igmvysiukpo18vjclaaaaaaenaacgpd7igmvysiukpo18vjclaaagrqynaaa=",
    "e82a2c1e-7df0-43ef-881b-2979632cafb3",
    "testwordfiletoioc",
    "matching",
    "script",
    "enrich",
    "increment",
    "deflated",
    "quarantine",
    "translation",
    "watch-list",
    "normalized_reg_path",
    "aamkagi5mzaxmtrhltyxndktngqwyy05yzvjltayyzm1zdcxmtllmwbgaaaaaaa9nafsckt6t4m34vxa7rpjbwcgpd7igmvysiukpo18vjclaaaaaaenaacgpd7igmvysiukpo18vjclaaagrqyqaaa=",
    "aamkagi5mzaxmtrhltyxndktngqwyy05yzvjltayyzm1zdcxmtllmwbgaaaaaaa9nafsckt6t4m34vxa7rpjbwcgpd7igmvysiukpo18vjclaaaaaaenaacgpd7igmvysiukpo18vjclaaagrqzbaaa=",
    "aamkagi5mzaxmtrhltyxndktngqwyy05yzvjltayyzm1zdcxmtllmwbgaaaaaaa9nafsckt6t4m34vxa7rpjbwcgpd7igmvysiukpo18vjclaaaaaaenaacgpd7igmvysiukpo18vjclaaagrqynaaabegaqak46mx7icqllp3ro936zox8=",
    "arcsightesm.cases.name",
    "77ax-uggbabcwb2pujdy8za==",
    "h0lvlmwgbabca5+hbryhzoq==",
    "highlightwords_test",
    "mitmproxy-4.0.4-linux.tar.gz",
    "Y6KRMXWQ8FPNSHHY",
    "KEY-----\\nMIIBVAIBADANBgkqhkiG9w0BAQEFAASCAT4wggE6AgEAAkEAyf1wyfSTygQ/Ogl/\\nB9DfMIszhnV/TwlygafjvwzruekpHDnJUQ9u+A7BD8zLAnLOaWgL94ioGlUpAXBa\\newC/0wIDAQABAkEAo+egaoConDkuBS5HglQfiAis2uLlV4FXBZby28jkT4pNqs/J\\n7wv9iRAjxJvV/K/GCa6wPcHqn7dN3XT1QODeQQIhAPaYlDmmqq2O+uftBm5y3ALG\\nNvFWI7OeO3l/K/I2H8cLAiEA0bFj9GBxmJWCxjk1kWoSNY3fZO9KiOqd5467KUuR\\nx1kCIH3jfOBFnqKF+L9H+N2P05Oy/z+LWySKZhBrhNLdILHrAiBLb+7OpreXNgpi\\n94fe9XLxk0WP0UpWMVl3SXDprUcXmQIgEVMV4W44YHywdmSEpzSOI+3YTedfVQzq\\na7AVPWWb4tU=\\n-----END",
    "eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhcHBJZCI6ImJj'",
    "\"ewC/0wIDAQABAkEAo+egaoConDkuBS5HglQfiAis2uLlV4FXBZby28jkT4pNqs/J\\n\"",
    "'hoNzBCS06dPfayZTaBzFElycBbR0BSyXhmkzudOPui5NCEtyvJ3YxkpZvLK8LuIRYA'",
    "\"94fe9XLxk0WP0UpWMVl3SXDprUcXmQIgEVMV4W44YHywdmSEpzSOI+3YTedfVQzq\\n\"",
    "\"x1kCIH3jfOBFnqKF+L9H+N2P05Oy/z+LWySKZhBrhNLdILHrAiBLb+7OpreXNgpi\\n\"",
    "\"B9DfMIszhnV/TwlygafjvwzruekpHDnJUQ9u+A7BD8zLAnLOaWgL94ioGlUpAXBa\\n\"",
    "\"7wv9iRAjxJvV/K/GCa6wPcHqn7dN3XT1QODeQQIhAPaYlDmmqq2O+uftBm5y3ALG\\n\"",
    "KEY-----\\nMIIBVAIBADANBgkqhkiG9w0BAQEFAASCAT4wggE6AgEAAkEAyf1wyfSTygQ/Ogl/\\n\"",
    "'YWI1YjU3LTZjYTQtNDNlZS1hNGMwLTYxOGEyMjQ2ZDRhYyJ9.iM26FZt0FL6b7Eq95DMq'",
    "\"NvFWI7OeO3l/K/I2H8cLAiEA0bFj9GBxmJWCxjk1kWoSNY3fZO9KiOqd5467KUuR\\n\"",
    "iVBORw0KGgoAAAANSUhEUgAAAFAAAABQCAMAAAC5zwKfAAACYVBMVEVHcEwAT4UAT4UAT4YAf/8A//8AT4UAf78AT4U",
    "AT4UAT4UAUYcAT4YAT4YAT48AXIsAT4UAT4UAUIUAUIUAT4UAT4UAVaoAW5EAUIYAWYwAT4UAT4UAT4UAUIgAT4YAUo",
    "UAUIYAUIUAT4YAVY0AUIUAT4UAUIUAUocAUYUAT4UAT4UAT4UAUIYAT4UAUIUAT4cAUYUAUIUAUIYAUocAT4UAUIUAT",
    "4YAUY4AUIUAUIYAT4UAVYgAT4UAT4UAT4YAVYUAT4UAT4UAT4YAT4cAT4UAT4UAUYYAZpkAWIUAT4UAT4gAbZEAT4UA",
    "UIYAT4UAUIUAT4cAUYgAT4UAZpkAT4UAT4UAT4UAVaoAUIUAT4UAWIkAT4UAU4kAUIUAUIUAU4gAT4UAT4UAT4UAVYg",
    "AUIUAT4YAVYkAUYUAT4UAU4cAUIYAUIUAT4gAUIYAVYsAT4YAUocAUYUAUIYAUYgAT4UAT4UAT4UAT4UAUYUAU4UAUY",
    "gAT4UAVY0AUIUAUIUAT4UAT4cAT4oAVY0AUYcAUIcAUIUAUIYAUIcAUYcAUIUAT4UAT4UAUIUAT4UAX58AT4UAUIUAU",
    "IYAT4UAUIYAUIgAT4UAT4UAUIUAT4UAUIUAT4YAT4UAUIYAT4YAUYkAT4UAUYYAUIUAT4UAT4YAT4YAT4YAT4cAUokA",
    "T4UAT4YAUIUAT4UAT4YAUIUAT4UAUIoAT4YAT4UAT4UAT4UAT4UAUIUAT4UAT4YAT4UAUYYAT4YAUYUAT4UAT4YAT4U",
    "AUoUAT4UAT4UAUIYAT4YAUIcAYokAT4UAT4UA65kA0ZYAu5PCXoiOAAAAx3RSTlMA+nO6AgG5BP799i9wShAL9/uVzN",
    "rxAw6JFLv08EmWKLyPmhI/x88+ccjz4WjtmU1F76VEoFbXGdKMrh71+K0qoZODIMuzSAoXni0H4HnjfnccQwXDjT0Gi",
    "/wa5zSCaSvBsWMPb9EnLMoxe3hHOSG+Ilh/S1BnzvJULjimCayy6UAwG1VPta91UVLNgJvZCNBcRuVsPIbb37BllNjC",
    "fTLsbrjukKejYCVtqb/5aqiXI9W0tnad4utdt2HEa1ro5EHWpBOBYg3JeEoS2QAAA5lJREFUGBmtwQN7Y0sABuAvbZK",
    "T1Ha3tt2ubdu2vXu517Zt27a+TH/VbXgmaTIz53nyvtDaV1+JdDrxHVvzkD43D5BsyUe6bKxmUP0qJNM2Y/Pxud9bMH",
    "d5DsNmlmGa/E8ZsvgumHqikFHzPUhgVTGipBxmun20LUCCw4zZAiPtjPMs4r3MmGvbYGA9E6yD7CwlN0FvPac5CckDl",
    "LRBK4dJPAxbDiXvQ+c9H5OZQMwW2lZDJ7eQyQ1vQsR+2j6ARnYnU6nKQ8gdtA1Co6mLqXX1AXBf72GUa6EbGmuotCvT",
    "u4tRBcOfQ+sATQ2cqoSBF2go6xiMtNNQA8zkH6GZ0zBU/mLFYEcBtbbCiVtrM6lxEA6NVFOpHk6d9lPpbjjVSKWCvXB",
    "oHzUyFyG1vuFzM3Yi3rfUqL5/E5Jzv8spz+chjpdao7VIag9D3kAcLw14szHd7h0MGfVAVkITvj/PI4H1OCNyITlPQ6",
    "7eDYjTzqirFmy9NDZnwRhsy0sZsw4xzX46kDVRiahHaPNleBD2+wDJSSGZpNK1v8sRstJP2StDFoDsXh+niIBEUOM/h",
    "NzLBDWtD/UwTAQkghr/IGgrFURAIqg2WoagzVQQAYmg2nUELaWKCEgEla56EFRMFRGQCCpdQtBlKomARFClA0GecSqJ",
    "gERQZSOCLlBNBCSCCucQZJVQTQQkggpnEHSFGiIgEQx76nhrDRPch5BiaoiARHCKv6gOgNW/n7LCOoT8e7GUSpNCMkm",
    "y5xmEeTJ8tBUh6q+K2XTA34yYPYx5qxK25Q0FNFYEmzXOqJ8RZ2eRi2Z8syDpY8RiNxIsmu+niSOQuR9liCsb0638ig",
    "a+RJwMhpxCUv1fUGsJ4jSt5ZRGpGBldFKjBPHOznjzmyGkNusHahyFQ1eyqPQZnHqQSv4n4VQVlTovwKGD1Mi89Bica",
    "KZWVsstFd35MLSUZoqXwcxLNJQBI699TENzYWDs4mya+hBadYOFjFp9YMlaKuVAw5rYwagb93gA1HYxtefKoeaeyRjf",
    "GYTkeZlK6TxofE2bFxHWCibn6oeG+zfatiOmgsn4foHOPEqehu1VJrEXWkOU5EKyhtPkQO9OSjZAdpIJDsOAVcOYccR",
    "bSJnvExjZzphuJGigzf8jzBz6gxG3u5HAs4JRrhGYGmthkK9xFaYpu41hWbkwVzbyTsdHb59AMtsyGVTahnRZ9hPJ13",
    "cjfQ4V89djSKcm71Ho/A9KDXs8/9v7cAAAAABJRU5ErkJggg==",
    "31:tCNnPn/K8BROQtLwu3Qs1Fz2TjDW+b7RiyfdRvmvCG+dGRQ08+3CN4i8QpLn2o4",
    "20:7yMOvCHfrNUNaJIus4SbwkpcSids8EscckQZzX/oGEwux6FJcH42uCQd9tNH8gmDkvPw",
    "LastVerbExecutionTime",
    "JunkAddRecipientsToSafeSendersList",
    "<SOAP-ENV:Header>",
    "</SOAP-ENV:Header>",
    "xW2YlxjdVEsAJNu_Hp5Dnespo8s/ZQw5R9B4LllVCDw22c-6qkEBmNk",
    "DBotTextSuggestionHighlighted",
    "last_found_len=IOC_RES_LEN",
    "httplib2.ProxyInfo(",
    "christy-duckey-laptop",
    "GoogleChronicleBackstory",
    "united-78c957c5",
    "vulnInfoList",
    "NAS-Identifier=de-wilm-251littl-idf3b-s2",
    "NAS-Port-Id=GigabitEthernet2/0/05",
    "--memory=1g##--memory-swap=-1##--pids-limit=256##--ulimit=nofile=1024:8192",
    "@pytest.mark.parametrize",
    "TestGetSuccessfulAndFailedPacks",
    "user_pack_metadata.json",
    "IP.Relationships.EntityAType",
    "IP.Relationships.EntityBType",
    "foo",
    "bar",
    "baz",
    "buzz",
    "test"
  ],
  "TrendMicroDDA": [
    "x-dtas"
  ],
  "AWS-EC2": [
    "aws-ec2-",
    "aws.ec2"
  ],
  "AWS - AccessAnalyzer": [
    "bda::",
    "bda::F"
  ],
  "ArcSightESM": [
    "7e6lebf8babcfa-dlp1rl1a=="
  ],
  "Box": [
    "'box_"
  ],
  "CheckpointFirewall": [
    "checkpoint"
  ],
  "CiscoSpark": [
    "cisco-spark"
  ],
  "CrowdStrikeHost": [
    "crowdstrike_falconhost",
    "cf54bb61f92e4d3e75bf4f7c11fc8f74:4295536142"
  ],
  "EasyVista": [
    "http://link"
  ],
  "Endgame": [
    "35b6f686-dece-545f-8314-56936abec6ba"
  ],
  "FireEyeHX": [
    "fireeye"
  ],
  "Flashpoint": [
    "Flashpoint.Forum.User.PlatformUrl",
    "Flashpoint_forum-Test",
    "Flashpoint.Forum.User.UserId"
  ],

  "ForcePoint": [
    ":15873/api/web/v1/"
  ],
  "GuidanceEncaseEndpoint": [
    "job-name",
    "file-name",
    "safe-name"
  ],
  "Incapsula": [
    "incap-"
  ],
  "IronDefense": [
    "expectation='EXP_UNKNOWN',"
  ],
  "LightCyberMagna": [
    "abcdefghijklmnopqrstuvwxyz"
  ],
  "MimecastAuth": [
    "dc04611d-3315-4572-976a-a2a9ddc7a0b9"
  ],
  "Moloch": [
    "moloch_",
    "stoptime"
  ],
  "PacketMail": [
    "cleanmx_virus,et_c2"
  ],
  "Panorama": [
    "</show>"
  ],
  "SandBlastAppliance": [
    "+':18194/tecloud/gw/'"
  ],
  "Tanium": [
    "max_data_age",
    "ignore_case_flag"
  ],
  "Vectra": [
    "vec-get-host-by-id"
  ],
  "Meraki": [
    "meraki"
  ],
  "GeneratePassword": [
    "max_lcase"
  ],
  "PcapMiner": [
    "trorabaugh/dempcap:1.0"
  ],
  "VolGetProcWithMalNetConn": [
    "volgetprocwithmalnetconn"
  ],
  "VolMalfindDumpAgent": [
    "volmalfinddumpagent"
  ],
  "pdfwithindicators": [
    "7a1d20b843446ca92a5d2ac9502238ffc6a8e48ce6a7f"
  ],
  "csvextrafield": [
    "name_1234_103"
  ],
  "Slack": [
    "GKB19PA3V",
    "GKNEJU4P9",
    "GKQ86DVPH",
    "DMGSNFCSX",
    "T9XJ4RGNQ",
    "dGVhbTpDQ0M3UENUTks=",
    "GL8GHC0LV"
  ],
  "VulnDB": [
    "VulnDB.cvssMetrics.IntegrityImpact",
    "VulnDB.CvssMetrics.AvailabilityImpact",
    "VulnDB.CvssMetrics.ConfidentialityImpact"
  ],
  "VirusTotal": [
      "File.VirusTotal.ScanID"
  ],

  "MicrosoftTeams": [
    "29:1KZccCJRTxlPdHnwcKfxHAtYvPLIyHgkSLhFSnGXLGVFlnltovdZPmZAduPKQP6NrGqOcde7FXAF7uTZ_8FQOqg",
    "67pd3967e74g45f28d0c65f1689132bo@thread.skype",
    "29:1pBMMC85IyjM3tr_MCZi7KW4pw4EULxLN4C7R_xoi3Wva_lOn3VTf7xJlCLK-r-pMumrmoz9agZxsSrCf7__u9R",
    "21f27jk08d1a487fa0f5467779619827@thread.skype",
    "2cbad0d78c624400ef83a5750539998g@thread.skype",
    "29:1pBMMC85IyjM3tr_MCZi7KW4pw4EULxLN4C7R_xoi3Wva_lOn3VTf7xJlCLK-r-pMumrmoz9agZxsSrCf7__u9R",
    "2cbad0d78c624400ef83a5750534448g@thread.skype",
    "1:1vW2mx4iDZf05lk18yskL64Wkfwraa76YTGNgDiIi-_5",
    "67pd3967e74g45f28d0c65f1689132bb@thread.skype",
    "29:1KZccCJRTxlPdHnwcKfxHAtYvPLIyHgkSLhFSnGXLGVFlnltovdZPmZAduPKQP6NrGqOcde7FXAF7uTZ_8FQOqg"
  ],
  "ZeroFox": [
    "UCXsoi0OsULGZorPOax4jqUQ"
  ],
  "CrowdstrikeFalcon": [
    "le10098bf0e311e989190662caec3daa_94cc8c55556741faa1d82bd1faabfb4a",
    "host_ids=284771ee197e422d5176d6634a62b934"
  ],
  "DXL": [
    "rsa_keygen_bits:2048"
  ],
  "CounterCraft Deception Director": [
    "'type_code:ValidAuth'",
    "criteria=\"type_code:ValidAuth\""
  ],
  "Lastline v2": [
    "file=03bc132ee4a10f6d656fc21315fc7a65797be69a",
    "le10098bf0e311e989190662caec3daa_94cc8c55556741faa1d82bd1faabfb4a"
  ],
  "TrendMicroApex": [
    "algorithm='HS256'",
    "api_path=PRODAGENTAPIPATH",
    "trendmicro-apex-usdo-list"
  ],
  "GoogleCloudCompute": [
    "compute.disks.useReadOnly'",
    "name=abc,port=123;name=abc,port=123'"
  ],
  "OPSWAT-Metadefender": [
    "OPSWAT-Metadefender"
  ],
  "Palo_Alto_Networks_WildFire_v2": [
    "file=12345678901234567890123456789012",
    "1d457069cb511af47a587287d59817148d404a2a7f39e1032d16094811f648e3"
  ],
  "Palo_Alto_MineMeld": [
    "File.MD5",
    "URL.Data<",
    "h_6945056004471533030179038",
    "h_549080515261533045679386",
    "h_7852984883241533030162610",
    "h_5903761773861533030170543",
    "h_5439582361971533030145741",
    "h_99158719451533030125933",
    "File.SHA1",
    "<strong>More"
  ]
}