High risk domain detected

Detects attempts to access domains with a high risk of information leakage based on the Leak Risk Domains pattern group.

| matchsig field=domain guid="7f8d80e1-1646-4536-bb7f-fddb8a7ba360" verify=f
| eval result = strjoin("\n", foreach(valueof(_1, "rule"), _matchsig_result)) | fields - _matchsig_result