Detects torrent access attempts based on the Torrent Service pattern group.
| matchsig field=domain guid="b8fde7c4-6065-4cc0-9015-9c8141a44683" verify=f
| eval result = strjoin("\n", foreach(valueof(_1, "rule"), _matchsig_result)) | fields - _matchsig_result
