Detects unauthorized China Mail Service access based on the China Mail Service pattern group.
| matchsig field=domain guid="bc1d6f62-6428-4d95-8323-8cc4113497e5" verify=f
| eval result = strjoin("\n", foreach(valueof(_1, "rule"), _matchsig_result)) | fields - _matchsig_result
