Detects unauthorized attempts to access cryptocurrency services based on the Cryptocurrency Services pattern group.
| matchsig field=domain guid="28991efd-6316-4a0a-b552-fb9ac9aa4392" verify=f
| eval result = strjoin("\n", foreach(valueof(_1, "rule"), _matchsig_result)) | fields - _matchsig_result
