DSM MITRE Policy.xml

<?xml version="1.0" encoding="utf-8"?>
<Export type="SecurityProfile" date="December 13, 2019 21:13" version="12.0.296">
	<SecurityProfiles>
		<SecurityProfile id="10">
			<TBUID></TBUID>
			<Name>MITRE POLICY</Name>
			<Description></Description>
			<ScheduleID isNull="true"/>
			<MultipleInterfaceTypes>false</MultipleInterfaceTypes>
			<CountersReset isNull="true"/>
			<DetectionEngineState>-1</DetectionEngineState>
			<OnAssignCustomAction></OnAssignCustomAction>
			<OnUnassignCustomAction></OnUnassignCustomAction>
			<AutoRequiresUpdate>-1</AutoRequiresUpdate>
			<ParentSecurityProfileID isNull="true"/>
			<AntiMalwareSecurityProfile id="10">
				<SecurityProfileID>10</SecurityProfileID>
				<AntiMalwareState>-1</AntiMalwareState>
			</AntiMalwareSecurityProfile>
			<NetworkSecurityProfile id="10">
				<SecurityProfileID>10</SecurityProfileID>
				<StatefulFilterID isNull="true"/>
				<NetworkControlState>2</NetworkControlState>
				<VulnerabilityShieldState>0</VulnerabilityShieldState>
			</NetworkSecurityProfile>
			<IntegritySecurityProfile id="10">
				<SecurityProfileID>10</SecurityProfileID>
				<SystemIntegrityState>0</SystemIntegrityState>
			</IntegritySecurityProfile>
			<LogInspectionSecurityProfile id="10">
				<SecurityProfileID>10</SecurityProfileID>
				<LogInspectionState>0</LogInspectionState>
			</LogInspectionSecurityProfile>
			<AppControlSecurityProfile id="10">
				<SecurityProfileID>10</SecurityProfileID>
				<AppControlState>0</AppControlState>
				<RulesetID isNull="true"/>
				<Lockdown isNull="true"/>
				<WhitelistMode isNull="true"/>
			</AppControlSecurityProfile>
			<SAPSecurityProfile id="10">
				<SecurityProfileID>10</SecurityProfileID>
				<SAPState>-1</SAPState>
			</SAPSecurityProfile>
		</SecurityProfile>
	</SecurityProfiles>
	<IPLists/>
	<PortLists>
		<PortList id="32">
			<TBUID>4F673227-5C7D-DAD0-B2CB-F56D845B5E6D</TBUID>
			<Name>Oracle SQL Server</Name>
			<Description></Description>
			<Items>1521,5560</Items>
			<Version></Version>
			<UserEdited>false</UserEdited>
		</PortList>
		<PortList id="1">
			<TBUID>21108FBB-6AE3-6A52-A655-FD39B0AD2EEC</TBUID>
			<Name>Remote Desktop</Name>
			<Description>Ports for accessing a machine using remote desktop/terminal services</Description>
			<Items>3389 # Remote Desktop</Items>
			<Version></Version>
			<UserEdited>false</UserEdited>
		</PortList>
		<PortList id="82">
			<TBUID>862217D4-465F-C27F-020B-C020357F92D4</TBUID>
			<Name>SSL</Name>
			<Description></Description>
			<Items>443</Items>
			<Version>1</Version>
			<UserEdited>false</UserEdited>
		</PortList>
		<PortList id="6">
			<TBUID>660F6C95-805D-225E-1D70-DCCBDFBCFC3E</TBUID>
			<Name>FTP</Name>
			<Description></Description>
			<Items>20,21</Items>
			<Version></Version>
			<UserEdited>false</UserEdited>
		</PortList>
		<PortList id="118">
			<TBUID>96C8E54B-95B3-8D01-208D-6477B2C271E7</TBUID>
			<Name>Web Server Common</Name>
			<Description></Description>
			<Items>80,383,443,444,631,808,1000,1099,1128,1158,1220,1408,1581,1812,2301,2381,3000,3037,3128,3200,3201,3443,3612,3900,4343,4848,5053,5080,5357,5358,5443,5466,5814,5984,5986,6405,6443,6988,6000-6199,7001,7002,7048,7080,7100,7101,7200,7501,7510,7770,7777,7778,7779,8000,8004,8007,8008,8015,8020,8028,8030,8043,8060,8088,8090,8093,8094,8095,8161,8300,8443,8500,8700,8800,8880,8888,8983,8989,8080-8083,9000,9060,9080,9090,9200,9495,9700,9710,9832,9850,9998,10000,10001,12345,15050,19000,19300,21009,21191,24880,26964,32000,41080,41443,46485,50000,50013,52312</Items>
			<Version>20</Version>
			<UserEdited>false</UserEdited>
		</PortList>
		<PortList id="46">
			<TBUID>5805497B-6FB8-F06F-294F-31592AEA6608</TBUID>
			<Name>Web Client Port</Name>
			<Description></Description>
			<Items>8080,80</Items>
			<Version>3</Version>
			<UserEdited>false</UserEdited>
		</PortList>
		<PortList id="63">
			<TBUID>950FB9AB-0FC1-50EA-B5CD-00E5E422DBE0</TBUID>
			<Name>Telnet</Name>
			<Description></Description>
			<Items>23</Items>
			<Version>1</Version>
			<UserEdited>false</UserEdited>
		</PortList>
		<PortList id="31">
			<TBUID>C6E323B4-3E9B-FFE2-B374-3B4862E0F495</TBUID>
			<Name>MySQL Server</Name>
			<Description></Description>
			<Items>3306</Items>
			<Version></Version>
			<UserEdited>false</UserEdited>
		</PortList>
	</PortLists>
	<Schedules/>
	<ScanCachePolicyObjects/>
	<ScanDirectoryLists/>
	<ScanFileLists/>
	<ScanFileExtLists/>
	<AntiMalwares/>
	<SecurityProfileAntiMalwares/>
	<MACLists/>
	<RuleContexts/>
	<PacketFilters/>
	<PacketFilterOverrides/>
	<StatefulFilters/>
	<PayloadFilter2s>
		<PayloadFilter2 doNotMerge="true" id="3332">
			<TBUID>446CDAB2-0298-8423-96D5-BB80159045EC</TBUID>
			<Name>Identified Suspicious Obfuscated JavaScript - 1 (ATT&amp;CK T1027)</Name>
			<Description>This DPI rule detects suspicious obfuscated JavaScript used by attackers to bypass security and gain unauthorized access to the system. Legitimate web sites could also obfuscate code to reduce security exposure or for intellectual property protection.

Note: The triggers of this rule have to be investigated further to confirm attacks.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>290</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>0</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>33569D94-0A79-8581-4ADF-FA9C285AD108</RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>9.30</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="4107">
			<TBUID>7693BB4F-A914-9C77-AFE8-96C9A978ACAA</TBUID>
			<Name>Executable File Uploaded On Network Share (ATT&amp;CK T1105)</Name>
			<Description>This rule is based on heuristics and will detect if executable file is being uploaded on a SMB share. Hence this rule should only be applied when executable files are not used over the SMB Share.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>343</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>1</Severity>
			<Mode>0</Mode>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="5644">
			<TBUID>CAB40D3A-288C-5ED7-C52E-490ED47177BD</TBUID>
			<Name>Identified Download Of DLL File Over WebDAV (ATT&amp;CK T1073)</Name>
			<Description>This rule is based on heuristics and will detect/prevent DLL file being requested to WebDAV server. 

Note: This rule should be applied when DLL files are not expected to be downloaded from the WebDAV shares.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>290</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>3</Severity>
			<Mode>0</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>7.90</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="3342">
			<TBUID>997B8DD5-37E4-B425-3BA1-6213220F516C</TBUID>
			<Name>Identified Suspicious Obfuscated JavaScript - 2 (ATT&amp;CK T1027)</Name>
			<Description>This DPI rule detects suspicious obfuscated JavaScript used by attackers to bypass security and gain unauthorized access to the system. Legitimate web sites could also obfuscate code to reduce security exposure or for intellectual property protection.

Note: The triggers of this rule have to be investigated further to confirm attacks.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>290</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>3</Severity>
			<Mode>0</Mode>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>33569D94-0A79-8581-4ADF-FA9C285AD108</RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="1297">
			<TBUID>AF30852F-DD4B-FC46-52ED-B35535D753D7</TBUID>
			<Name>Restrict Attempt To Enumerate Windows User Accounts (ATT&amp;CK T1087)</Name>
			<Description>This filter identifies an attempt to enumerate user account information on a Windows host. There are valid cases where an administrator may want to enumerate accounts on a remote system but any alert from this filter should be investigated.
Note: This rule should not be assigned to domain controllers.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>343</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="5912">
			<TBUID>FB4EB0C1-8C61-9C57-D027-A182AA0A8769</TBUID>
			<Name>HTTP Protocol Decoding</Name>
			<Description>Required by all other HTTP DPI rules. This DPI rule decodes the HTTP protocol, restricts URI and query lengths, and validates URI encoding.</Description>
			<Priority>1</Priority>
			<ConnectionTypeID>311</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>0</Mode>
			<MinimumAgentVersion>5.0.0.3000</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>true</DependedOn>
			<RecommendationsMode>1</RecommendationsMode>
			<CvssScore>10.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="6424">
			<TBUID>F8F91063-51BD-5F82-F336-150D72E146EF</TBUID>
			<Name>Identified Too Many SSL Alert Messages In SSLv3 Over RDP (ATT&amp;CK T1032)</Name>
			<Description>This is a heuristic based rule to detect too many SSL alert messages from a server within a period of time. Such large number of alert messages could be an indication of block-wise chosen-boundary attack, which could allow an attacker to obtain plain-text bytes using SSLv3 protocol.

Note: Configuration options are provided to customize the alert frequency of the events. Multiple alert messages in SSLv3 protocol can occur legitimately due to server limitations. Hence, every trigger of this rule should be investigated further to confirm an attack.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>361</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>2</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>4.30</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="3609">
			<TBUID>A5B98F35-4880-C25E-8CA0-3C4FF3A8314F</TBUID>
			<Name>Identified SSL/TLS Diffie-Hellman Key Exchange Using Weak Parameters Client (ATT&amp;CK T1032)</Name>
			<Description>This rule is intended to identify Diffie-Hellman Ephemeral Cipher suites using parameters with 512 bits length.  The SSL/TLS session keys created with weak parameters could allow an attacker to recover the plain text on the encrypted channel.

This rule will detect if the SSL/TLS client is using DHE weak parameters.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>304</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>2</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>1</RecommendationsMode>
			<CvssScore>5.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="3610">
			<TBUID>55807850-ACDC-2B7F-766A-992B610A9CBD</TBUID>
			<Name>Identified SSL/TLS Diffie-Hellman Key Exchange Using Weak Parameters Server (ATT&amp;CK T1032)</Name>
			<Description>This rule is intended to identify Diffie-Hellman Ephemeral Cipher suites using parameters with 512 bits length.  The SSL/TLS session keys created with weak parameters could allow an attacker to recover the plain text on the encrypted channel.

This rule will detect if the SSL/TLS server is using DHE weak parameters.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>330</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>2</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>1</RecommendationsMode>
			<CvssScore>5.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="2330">
			<TBUID>ED9F493D-C614-A6C8-D481-41D0CC965DB7</TBUID>
			<Name>MSN Instant Message URL Blocker (ATT&amp;CK T1102)</Name>
			<Description>This filter blocks any message containing a web link sent via MSN Messenger over MSN protocol</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>322</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="1307">
			<TBUID>1704C95A-DAF3-1896-49C9-8F9D78F14BCD</TBUID>
			<Name>Detected Rlogin Server Traffic (ATT&amp;CK T1021)</Name>
			<Description>This filter detects Rlogin server traffic based on heuristics. Configuration options are provided to set the event frequency of this filter.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>350</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.5272</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="4379">
			<TBUID>A82300FE-01CB-1DD5-5BA1-D0C8ECEBD724</TBUID>
			<Name>Identified Usage Of EXPORT Cipher Suite In SSLv2 Connection (ATT&amp;CK T1032)</Name>
			<Description>Export Cipher suites, as used in the SSLv2 protocol, are very weak and it is easy for remote attackers to conduct plain text-recovery attacks.

Note: This is a heuristic based rule which identifies if any Export cipher suites are being used in SSLv2 connection.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>330</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>2</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>1</RecommendationsMode>
			<CvssScore>4.30</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="2331">
			<TBUID>DAA95A8E-5196-967F-1291-BB515869F767</TBUID>
			<Name>Yahoo Instant Message URL Blocker (ATT&amp;CK T1102)</Name>
			<Description>This filter blocks any message containing web link sent via Yahoo Messenger over Yahoo Protocol.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>322</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="1309">
			<TBUID>9810E353-00EF-D5E6-5E54-922366535F89</TBUID>
			<Name>Detected Telnet Server Traffic (ATT&amp;CK T1021)</Name>
			<Description>This is a heuristics based filter to detect Telnet server traffic.
Configuration options are provided to set the event frequency of this filter.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>350</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="3357">
			<TBUID>9A09328B-F22E-86EE-BF4D-3B2C9F611454</TBUID>
			<Name>Port Mapper Decoder Passive FTP Server</Name>
			<Description>FTP servers can run in Active and Passive modes. In passive mode, the FTP server opens a dynamic port, sends the FTP client the server&apos;s IP address to connect to and the port on which it is listening over the control stream and waits for a connection from the FTP client.  
This filter decodes the FTP port mapper traffic to find out the dynamic port number over FTP control connection.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>280</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>0</Mode>
			<MinimumAgentVersion>5.0.0.3000</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>true</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="3614">
			<TBUID>C718E85F-D4CB-7D40-5125-92074CFC9032</TBUID>
			<Name>Detected SSL/TLS Server Traffic (ATT&amp;CK T1032)</Name>
			<Description>This DPI rule detects SSL/TLS server traffic based on heuristics. 

Note: Configuration options are provided to set the protocols disallowed, ports monitored and event frequency of the rule.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>350</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="3105">
			<TBUID>DD92DE83-238A-8522-7B4D-426559ED9E45</TBUID>
			<Name>Identified Suspicious Obfuscated JavaScript (ATT&amp;CK T1027)</Name>
			<Description>This DPI rule detects suspicious obfuscated JavaScript used by attackers to bypass security and gain unauthorized access to the system. Legitimate web sites could also obfuscate code to reduce security exposure or for intellectual property protection.

Note: The triggers of this rule have to be investigated further to confirm attacks.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>290</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>0</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>33569D94-0A79-8581-4ADF-FA9C285AD108</RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>9.30</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="5665">
			<TBUID>F8D5B353-F96E-7BB0-5641-8C3A2099EF30</TBUID>
			<Name>POP3 Mail Server Possible Brute Force Attempt (ATT&amp;CK T1110)</Name>
			<Description>This rule blocks brute force attempt to POP3 mail server by inspecting the number of invalid login attempts in a given time period. The IP address is blocked for 20 minutes after the brute force attempt is detected.

Note: Configuration option can be used to enter error responses of the mail server to be monitored.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>227</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>0</Mode>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="2337">
			<TBUID>E76366E5-EE43-CB07-D1C6-C32A60BA124D</TBUID>
			<Name>FTP Server Possible Brute Force Attempt (ATT&amp;CK T1110)</Name>
			<Description>This filter detects a brute force attempt to gain the FTP Server Password by inspecting the number of failed logins in a time period. An attacker may use automated tools to iterate through all combinations or use a dictionary attack to guess passwords.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>236</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>2</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.0.0.3000</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="2338">
			<TBUID>A7C3B766-9C0A-B702-3BFB-77DDEEECCCEB</TBUID>
			<Name>Oracle Database Server Possible Brute Force Attempt (ATT&amp;CK T1110)</Name>
			<Description>This filter detects a brute force attempt to gain the Oracle Database Password by inspecting the number of failed logins in a time period. An attacker may use automated tools to iterate through all combinations or use a dictionary attack to guess passwords.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>213</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>3</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.0.0.3000</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="6440">
			<TBUID>11788183-A1F7-A41F-62B5-7448D55FFA78</TBUID>
			<Name>Identified Potentially Malicious RAT Traffic - VII (ATT&amp;CK T1094)</Name>
			<Description>A remote access tool (or RAT) is a software used to access a remote computer often used for malicious activities. This smart rule identifies suspicious RAT traffic.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>271</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="5162">
			<TBUID>D9EF62E7-FBA0-A176-7728-922037458F49</TBUID>
			<Name>Identified TLS/SSL DES Cipher Suite Is Being Supported (ATT&amp;CK T1032)</Name>
			<Description>A cipher block collision vulnerability has been reported in the OpenSSL 3 Data Encryption Standard (3DES) and Data Encryption Standard (DES) ciphers. The vulnerability is due to use of small block size (64-bit) in 3DES. A remote attacker can exploit this vulnerability by monitoring the traffic over long session. Successful exploitation may result in the plaintext recovery of the monitored encrypted traffic.

Note: This is a heuristic based rule which identifies the DES algorithm being used in SSL/TLS traffic.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>330</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>2</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>5.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="6962">
			<TBUID>87B99EBD-B646-EB5E-D6C2-528F5EF37C48</TBUID>
			<Name>Identified Pastebin Communication (ATT&amp;CK T1102)</Name>
			<Description>Adversaries may use an existing, legitimate external Web service as a means for relaying commands to a compromised system. This filter detects web access to Pastebein service.

Note: The triggers of this rule have to be investigated further to confirm attacks.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>328</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="6196">
			<TBUID>AE2B1763-408C-2616-9427-8392674871B8</TBUID>
			<Name>MySQL Database Server Possible Login Brute Force Attempt (ATT&amp;CK T1110)</Name>
			<Description>This rule detects a brute force attempt to gain the MySQL Database access by inspecting the number of failed logins in a time period. An attacker may use automated tools to iterate through all combinations or use a dictionary attack to guess passwords.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>215</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>2</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>1</RecommendationsMode>
			<CvssScore>5.10</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="2880">
			<TBUID>36B3D7AB-C33D-A104-4941-9B0AFB4A50EA</TBUID>
			<Name>Identified Compression Algorithm In SSL/TLS (ATT&amp;CK T1002)</Name>
			<Description>This DPI rule detects the usage of compression algorithm in SSL/TLS traffic. The TLS protocol can encrypt compressed data without properly obfuscating the length of the unencrypted data, which allows man-in-the-middle attackers to obtain plaintext HTTP headers by observing length differences during a series of guesses in which a string in an HTTP request potentially matches an unknown string in an HTTP header, aka a &quot;CRIME&quot; attack.

Note: Compression algorithm in SSL/TLS protocol is also used for legitimate purpose due to server limitations. Hence, every trigger of this rule should be investigated further to confirm an attack. Configuration options are provided to customize the alert frequency of the events.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>303</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>1</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>2.60</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="4160">
			<TBUID>FD4769AF-23BB-EE79-4130-855EFDEE9485</TBUID>
			<Name>Batch File Uploaded On Network Share (ATT&amp;CK T1105)</Name>
			<Description>This is a heuristic based rule which detects if a batch (.bat) file is being uploaded on the Network share using SMB protocol.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>343</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>1</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="2881">
			<TBUID>EDBEF5E5-8FAF-1C27-F235-400B094739F7</TBUID>
			<Name>Identified Suspicious OpenSSL TLS/DTLS Heartbeat Request (ATT&amp;CK T1032)</Name>
			<Description>The TLS and DTLS implementations in OpenSSL do not properly handle Heartbeat Extension packets, which allow remote attackers to obtain sensitive information from process memory via crafted packets. This is a heuristic based rule to identify such suspicious Heartbeat requests.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>285</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>2</Severity>
			<Mode>0</Mode>
			<MinimumAgentVersion>5.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>5.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="2883">
			<TBUID>2C739059-C561-1148-7541-D8EFEAFABC6C</TBUID>
			<Name>Restrict OpenSSL TLS/DTLS Heartbeat Message (ATT&amp;CK T1032)</Name>
			<Description>OpenSSL contains a flaw in its implementation of the TLS/DTLS (Transport layer security protocols) heartbeat functionality which allows an attacker to retrieve sensitive information. This DPI rule is intended to prevent TLS/DTLS heartbeat message coming from a SSL Server.

Note: Configuration options are provided to customize the alert frequency of the events.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>257</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>2</Severity>
			<Mode>0</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>5.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="2121">
			<TBUID>B14D79EC-8322-C39B-2D47-D359D63C0454</TBUID>
			<Name>Detected HTTP Client Traffic (ATT&amp;CK T1071,T1048)</Name>
			<Description>This is a heuristics based filter to detect HTTP Client traffic on a host. For mission critical servers, limited HTTP client traffic means those servers will have less exposure to web related attacks. It also prevents potential backdoor software from contacting external malicious sites.

This filter will only trigger once per 24 hours for a given host to prevent excessive logging. The frequency of event settings can be modified on the Configuration tab should your environment require different configuration.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>271</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="1358">
			<TBUID>E2EE896A-894E-0779-F5EF-D6906EA8FE2F</TBUID>
			<Name>Detected X11 Server Traffic (ATT&amp;CK T1021)</Name>
			<Description>This filter detects X11 server traffic based on heuristics. Configuration options are provided to customize ports to inspect or ignore traffic and to set the event frequency of this filter. After appropriate configuration, an event could indicate suspicious activity since X11 traffic over non-standard ports indicates the presence of a backdoor X11 server installation.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>350</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="2639">
			<TBUID>BF981FA4-8B3F-8781-D31E-1319DF373BBC</TBUID>
			<Name>Web Server Restrict Executable File Uploads (ATT&amp;CK T1105)</Name>
			<Description>This filter blocks EXE file uploads. Administrator can configure this filter and allow certain EXE file uploads.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>311</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>2</Severity>
			<Mode>0</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="2640">
			<TBUID>4C85BFA3-385A-D35D-20A1-378F520CA3C7</TBUID>
			<Name>Identified Suspicious Upload Of Archive File (ATT&amp;CK T1105)</Name>
			<Description>This is a heuristic based rule to block the upload of certain archive files. The uploaded file could contain malicious code in the form of an exploit, virus, Trojan or malware, which could be used to gain control of the Web server.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>263</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>2</Severity>
			<Mode>0</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>4.30</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="4177">
			<TBUID>5296E22B-FDEE-0684-0141-4D9530C05D36</TBUID>
			<Name>Identified Revoked Certificate Authority In SSL Traffic (ATT&amp;CK T1032)</Name>
			<Description>This rule prevents the use of revoked/unauthorized Root/Intermediate CAs based on the list of configured CA/Issuers.

Note: Configuration options are provided to configure CA (Certificate Authority).</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>270</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>0</Mode>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>1</RecommendationsMode>
			<CvssScore>10.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="6226">
			<TBUID>FD4D8D1F-99F2-1377-E674-405A840AF2A8</TBUID>
			<Name>Windows Port Mapper Decoder</Name>
			<Description>Microsoft Remote Procedure Call (RPC) is an interprocess communication (IPC) mechanism that enables data exchange and invocation of functionality residing in a different process. A client will call the endpoint mapper (EPM) at the server to ask for a &quot;well known&quot; service. The server will answer the client at which port this service is available. This rule decodes the port shared by the Server using DCE/RPC Endpoint Mapper (EPM) Protocol, and helps other rules for monitoring traffic on the dynamically opened port.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>110</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>3</Severity>
			<Mode>0</Mode>
			<MinimumAgentVersion>5.0.0.3000</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>true</DependedOn>
			<RecommendationsMode>1</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="4180">
			<TBUID>6AC0E2C2-E448-A290-4C06-6C0866258FCA</TBUID>
			<Name>Disallow Upload Of A Class File (ATT&amp;CK T1105)</Name>
			<Description>This is a heuristic based rule to identify the upload of Class files to a Web Server. These files could be potentially harmful for running applications and could be used for further attacks.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>311</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>1</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="6484">
			<TBUID>8AC987E8-5FA7-C228-E2C3-46795FEE2AA1</TBUID>
			<Name>Detected Suspicious DLL Side Loading Attempt Over WebDAV (ATT&amp;CK T1073)</Name>
			<Description>DLL side-loading vulnerability specifically occur when Windows Side-by-Side (WinSxS) manifests are not explicit enough about characteristics of the DLL to be loaded. Attackers may take advantage of a legitimate program that is vulnerable to side-loading to load a malicious DLL. Successful exploitation of this vulnerability could lead to remote code execution.  This rule detects attempts to load DLL files which are not signed by Microsoft or Adobe Corporation over WebDAV. 

Note: Triggers of this rule need to be analyzed further to confirm attack.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>290</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>2</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>33569D94-0A79-8581-4ADF-FA9C285AD108</RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>6.80</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="6485">
			<TBUID>AE7F0B13-FF1A-75DE-AC2C-E19C760CA9DE</TBUID>
			<Name>Identified DLL Side Loading Attempt Over Network Share (ATT&amp;CK T1073)</Name>
			<Description>DLL side-loading vulnerability specifically occur when Windows Side-by-Side (WinSxS) manifests are not explicit enough about characteristics of the DLL to be loaded. Attackers may take advantage of a legitimate program that is vulnerable to side-loading to load a malicious DLL. Successful exploitation of this vulnerability could lead to remote code execution. This rule detects attempts to load DLL files which are not signed by Microsoft or Adobe Corporation over network shares. 

Note: Triggers of this rule need to be analyzed further to confirm attack.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>355</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>9.30</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="7001">
			<TBUID>E0911746-68F1-3F9E-6222-3EBCABFE546E</TBUID>
			<Name>Identified Usage Of Windows Remote Management (ATT&amp;CK T1028)</Name>
			<Description>Windows Remote Management (WinRM) is the name of both a Windows service and a protocol that allows a user to interact with a remote system (e.g., run an executable, modify the Registry, modify services).

Note: In some network environment, this rule could generate lots of trigger, therefore trigger should be investigated further to confirm attack.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>371</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="7002">
			<TBUID>BE1776C7-F01C-959E-8D78-985483AFB42B</TBUID>
			<Name>Identified Domain-Level Credentials Dumping Over DCERPC (ATT&amp;CK T1003)</Name>
			<Description>Credential dumping is the process of obtaining account login and password information, normally in the form of a hash or a clear text password, from the operating system or Domain. Credentials can then be used to perform Lateral Movement and access restricted information.

Note: In some network environment, this rule could generate lots of trigger, therefore trigger should be investigated further to confirm attack.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>155</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>FD4D8D1F-99F2-1377-E674-405A840AF2A8</RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="7003">
			<TBUID>BF18C528-9D33-7DBC-DCA6-278766C33453</TBUID>
			<Name>Identified Initialization Of WMI - Server (ATT&amp;CK T1047)</Name>
			<Description>Windows Management Instrumentation Command-line (WMIC) is a command line tool that executes commands on remote systems and redirects console application output to the local system so that these applications appear to be running locally. This DPI rule identifies the use of WMI Process command through DCERPC request. WMIC is used by malwares and exploits for lateral movement in the network.

Note: In some network environment, this rule could generate lots of trigger, therefore trigger should be investigated further to confirm attack.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>155</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>3</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>FD4D8D1F-99F2-1377-E674-405A840AF2A8</RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="7004">
			<TBUID>E1321AC4-A907-A327-FBCA-FD9BA2FDA488</TBUID>
			<Name>Identified Domain-Level Groups/Accounts Enumeration Over SMB (ATT&amp;CK T1069, T1087, T1018)</Name>
			<Description>This DPI rule is to detect domain groups/accounts enumeration over SMB. This technique is used by adversaries in lateral movements to collect the information about compromised network.

Note: In some network environment, this rule could generate lots of trigger, therefore trigger should be investigated further to confirm attack.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>343</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="5725">
			<TBUID>8D4566AF-E335-BDAF-54BB-05CB0945DDE0</TBUID>
			<Name>Prevent Windows Administrator User Login Over SMB (ATT&amp;CK T1077)</Name>
			<Description>This rule is intended to prevent SMB login attempts by user, &quot;Administrator&quot; of administrator account type on any Windows platforms. Using an Administrator account for normal tasks is not suggested as it bypasses all Windows security measures.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>343</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>3</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="4189">
			<TBUID>9E11A36D-5594-706E-9426-21A67117B33C</TBUID>
			<Name>Executable File Uploaded On System32 Folder Through SMB Share (ATT&amp;CK T1105)</Name>
			<Description>This is a heuristic based rule which detects if executable file is being uploaded in the &apos;System32&apos; directory through Network Share.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>343</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>1</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="7005">
			<TBUID>6C4E3209-67EF-18CA-3BE4-216E82A211E7</TBUID>
			<Name>Identified Remote Desktop Protocol (RDP) Brute Force Attempt (ATT&amp;CK T1076)</Name>
			<Description>This is a heuristic based rule which blocks the RDP brute force attempts.

Note: In some network environment, this rule could generate lots of trigger, therefore trigger should be investigated further to confirm attack.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>361</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.0.0.3000</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="5213">
			<TBUID>EB093B14-6AF2-C675-2937-FBFFEA1E783F</TBUID>
			<Name>Identified Suspicious RTF File With Obfuscated PowerShell Execution (ATT&amp;CK T1027,T1086)</Name>
			<Description>This is a heuristic based rule intended to block attempts to load suspicious Microsoft Word RTF files containing PowerShell code, over HTTP traffic.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>290</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>0</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>33569D94-0A79-8581-4ADF-FA9C285AD108</RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>1</RecommendationsMode>
			<CvssScore>9.30</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="7006">
			<TBUID>4AE183B0-05D9-F42A-950D-2CB7E76B1223</TBUID>
			<Name>Identified Usage Of WMI Execute Methods - Server - 1 (ATT&amp;CK T1047)</Name>
			<Description>Windows Management Instrumentation Command-line (WMIC) is a command line tool that executes commands on remote systems and redirects console application output to the local system so that these applications appear to be running locally. This DPI rule identifies the use of WMI Process command through DCERPC request. WMIC is used by malwares and exploits for lateral movement in the network.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>155</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>3</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>FD4D8D1F-99F2-1377-E674-405A840AF2A8</RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="3167">
			<TBUID>A07BE280-403E-6785-1E85-D596B6B4143B</TBUID>
			<Name>Identified CBC Based Cipher Suite In SSLv3 Response (ATT&amp;CK T1032)</Name>
			<Description>This DPI rule detects the usage of CBC Based cipher suites in SSLv3.0 traffic. The CBC Based cipher suites use symmetric encryption algorithm in vulnerable SSL protocol to encrypt data with chained initialization vectors, which allows man-in-the-middle attackers to obtain plain-text HTTP headers via a block-wise chosen-boundary attack on an HTTPS session.

Note: CBC Based cipher suites in SSLv3.0 protocol are also used for legitimate purpose due to server limitations. Hence, every trigger of this rule should be investigated further to confirm an attack. Configuration options are provided to customize the alert frequency of the events.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>303</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>2</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>4.30</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="7007">
			<TBUID>BDAA9C96-579B-7083-8EF3-A3CBFA27E0EF</TBUID>
			<Name>Block Administrative Share - 1 (ATT&amp;CK T1077,T1105)</Name>
			<Description>Administrative Shares are the default network shares created by all Windows NT-based operating systems. These default shares share every hard drive partition in the system and the windows directory. 
This filter blocks attempt to access administrative share on a windows machine.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>343</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>2</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="7008">
			<TBUID>AD883D37-A4E4-713A-2BA8-CCAA54E59A05</TBUID>
			<Name>Detected Terminal Services (RDP) Server Traffic - 1 (ATT&amp;CK T1015,T1043,T1076,T1048,T1032,T1071)</Name>
			<Description>This DPI rule detects RDP server traffic based on heuristics. An event indicates suspicious activity since RDP traffic over non-standard ports indicates the presence of a backdoor RDP server installation.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>350</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="4192">
			<TBUID>1B4F5898-35ED-ED76-8EF2-F3A5CA49D311</TBUID>
			<Name>TMTR-0005: GHOST RAT TCP Connection Detected (ATT&amp;CK T1094)</Name>
			<Description>A remote access tool (or RAT) is a software used to access a remote computer often used for malicious activities. This smart rule identifies suspicious RAT traffic.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>271</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.5277</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="5728">
			<TBUID>9ED3D0C3-773C-8FED-2131-DE72EF7FCD0D</TBUID>
			<Name>Restrict Microsoft .Net Executable File Upload (ATT&amp;CK T1105)</Name>
			<Description>This is a generic rule to prevent any upload of Microsoft .Net executable over HTTP. Attackers may use malicious Microsoft .NET executable files to cause remote code execution.

Note: This DPI rule should be applied ONLY in server environments where upload of Microsoft .Net executable over HTTP is not allowed.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>311</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>0</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>FB4EB0C1-8C61-9C57-D027-A182AA0A8769</RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>9.30</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="7009">
			<TBUID>E72233A6-A60B-7F70-7EEF-391CA76266C8</TBUID>
			<Name>Identified WMI Query Over DCE/RPC Protocol (ATT&amp;CK T1005)</Name>
			<Description>Adversaries may collect sensitive data from the file system or databases using WMI commands.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>155</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>FD4D8D1F-99F2-1377-E674-405A840AF2A8</RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>1</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="4197">
			<TBUID>356D676C-2698-E3B9-D473-B7E2ECE69A16</TBUID>
			<Name>TMTR-0010: FAKEM RAT TCP Connection (ATT&amp;CK T1094)</Name>
			<Description>A remote access tool (or RAT) is a software used to access a remote computer often used for malicious activities. This smart rule identifies suspicious RAT traffic.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>271</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="4198">
			<TBUID>87026093-4D8F-CC3C-0AE0-39D19966B753</TBUID>
			<Name>TMTR-0011: FAKEM RAT TCP Request (ATT&amp;CK T1094)</Name>
			<Description>A remote access tool (or RAT) is a software used to access a remote computer often used for malicious activities. This smart rule identifies suspicious RAT traffic.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>271</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="4199">
			<TBUID>FD2AA682-AFAF-F505-A100-1D7B3D7A40AD</TBUID>
			<Name>TMTR-0012: FAKEM RAT TCP Connection (ATT&amp;CK T1094)</Name>
			<Description>A remote access tool (or RAT) is a software used to access a remote computer often used for malicious activities. This smart rule identifies suspicious RAT traffic.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>271</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="5736">
			<TBUID>5DB21CC2-8A53-65E7-791F-F3642648967F</TBUID>
			<Name>FTP Server Restrict Executable File Uploads (ATT&amp;CK T1105)</Name>
			<Description>This DPI rule blocks EXE file uploads. Administrator can configure this rule and allow certain EXE file uploads.

NOTE: This DPI rule only checks the data transfer in PASV mode.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>236</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>2</Severity>
			<Mode>0</Mode>
			<MinimumAgentVersion>5.0.0.3000</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>9A09328B-F22E-86EE-BF4D-3B2C9F611454</RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="4201">
			<TBUID>5C156A65-AFA1-D158-5E2F-2AEA268D55E4</TBUID>
			<Name>TMTR-0014: NJRAT TCP Connection (ATT&amp;CK T1094)</Name>
			<Description>A remote access tool (or RAT) is a software used to access a remote computer often used for malicious activities. This smart rule identifies suspicious RAT traffic.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>271</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="7018">
			<TBUID>99BCBCC5-5884-2D4D-FE56-93D8E2BDBD50</TBUID>
			<Name>Identified WhatsApp Communication Attempt (ATT&amp;CK T1102)</Name>
			<Description>This filter detects an attempt to communicate with the WhatsApp application on a mobile phone device. WhatsApp is a mobile communication application available on all major mobile platforms. WhatsApp enables instant messaging and sending images, video and audio.

Note: Triggers of this rule have to be investigated further.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>271</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>3</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="4203">
			<TBUID>C5689773-87C7-2402-73E9-11132695AC63</TBUID>
			<Name>TMTR-0016: SPLINTER RAT TCP Connection (ATT&amp;CK T1094)</Name>
			<Description>A remote access tool (or RAT) is a software used to access a remote computer often used for malicious activities. This smart rule identifies suspicious RAT traffic.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>271</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="2923">
			<TBUID>B56A1DA5-97B6-1EEF-B3AC-C423B9D1E6C5</TBUID>
			<Name>Identified Too Many Compressed HTTP Responses (ATT&amp;CK T1002)</Name>
			<Description>Data compression algorithms can be used by web servers to compress the HTTP responses. BREACH security tool exploits a property of compression algorithms to steal sensitive data. This is a heuristic based rule to identify too many compressed HTTP responses within a period of time.

Note: Configuration options are provided to set the count, time period and event frequency of this rule. To monitor SSL Data Stream, agent (DSA) needs to be configured via &quot;SSL Configuration Wizard&quot; and has to acquire the Server SSL certificate where DPI rule is assigned.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>330</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>3</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>7.80</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="4204">
			<TBUID>F844A5DD-B2E5-815A-3590-01617F7E2C36</TBUID>
			<Name>TMTR-0017: ZIYAZO RAT BKDR Connection (ATT&amp;CK T1094)</Name>
			<Description>A remote access tool (or RAT) is a software used to access a remote computer often used for malicious activities. This smart rule identifies suspicious RAT traffic.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>271</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.5277</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="5486">
			<TBUID>AA9B2F66-E112-513D-1256-B5F93097898D</TBUID>
			<Name>Disallow Upload Of A JSP File (ATT&amp;CK T1105)</Name>
			<Description>This is a heuristic based rule to identify the upload of JSP files to a Web Server. These files could be potentially harmful for running applications and could be used for further attacks.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>311</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>0</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>FB4EB0C1-8C61-9C57-D027-A182AA0A8769</RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>10.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="4976">
			<TBUID>54A7C3A7-D4F7-5868-E1D7-2DD31C82FB24</TBUID>
			<Name>Amazon Cloud Drive (ATT&amp;CK T1102)</Name>
			<Description>Amazon Cloud Drive is a file hosting service that allows users to sync files and later access them from a web browser. This rule detects Amazon Cloud Drive file sharing client traffic based on heuristics. It also provides configuration options to set the event frequency of the rule.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>320</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>3</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="4977">
			<TBUID>D8D50364-2791-E59E-AE69-92D597E8FBB0</TBUID>
			<Name>BOX (ATT&amp;CK T1102)</Name>
			<Description>BOX is a file hosting service that allows users to sync files and later access them from a web browser. This rule detects BOX file sharing client traffic based on heuristics. It also provides configuration options to set the event frequency of the rule.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>320</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>3</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="4979">
			<TBUID>D1921D67-99A5-58A6-6020-2CAFE583CC69</TBUID>
			<Name>Microsoft OneDrive (ATT&amp;CK T1102)</Name>
			<Description>OneDrive (previously SkyDrive) is a file hosting service that allows users to sync files and later access them from a web browser. This rule detects Microsoft OneDrive file sharing client traffic based on heuristics. It also provides configuration options to set the event frequency of the rule.

Note: This rule blocks communication of any client with OneDrive storage.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>320</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>3</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="4983">
			<TBUID>546916C8-7FC4-FB94-36B7-541073D0915D</TBUID>
			<Name>FTP Client (ATT&amp;CK T1048)</Name>
			<Description>This is a heuristics based filter to detect FTP client traffic. Configuration options are provided to set the event frequency of this filter.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>320</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="3448">
			<TBUID>4BF97879-DBFB-CBEC-0BAC-B5751547D4A7</TBUID>
			<Name>Identified Usage Of TLS/SSL EXPORT Cipher Suite In Request (ATT&amp;CK T1032)</Name>
			<Description>Export Cipher suites, as used in the TLS protocol and SSL protocol, are very weak and it is easy for remote attackers to conduct plaintext-recovery attacks.

Note: This is a heuristic based rule which identifies if any Export cipher suite being used in SSL/TLS traffic.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>330</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>2</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>1</RecommendationsMode>
			<CvssScore>4.30</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="3449">
			<TBUID>85AB1538-FF81-337D-50AA-1629A6F331A1</TBUID>
			<Name>Identified Usage Of TLS/SSL EXPORT Cipher Suite In Response (ATT&amp;CK T1032)</Name>
			<Description>Export Cipher suites, as used in the TLS protocol and SSL protocol, are very weak and it is easy for remote attackers to conduct plaintext-recovery attacks.

Note: This is a heuristic based rule which identifies if any Export cipher suite being used in SSL/TLS traffic.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>304</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>2</Severity>
			<Mode>0</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>1</RecommendationsMode>
			<CvssScore>4.30</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="4985">
			<TBUID>B3C391AB-AE16-CD43-6EA8-737CE62F27D0</TBUID>
			<Name>Jabber (ATT&amp;CK T1102)</Name>
			<Description>This is a heuristics based filter to detect the Jabber protocol, a popular open source chat protocol. Configuration options are provided to set the event frequency of this filter.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>322</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="4989">
			<TBUID>04094C63-DEE0-9179-C560-5FFA6B154C4E</TBUID>
			<Name>QQ Messenger (ATT&amp;CK T1102)</Name>
			<Description>This is a heuristics based filter to detect QQ Messenger communication over the network. Configuration options are provided to set the event frequency of this filter.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>322</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="4990">
			<TBUID>9BF05C7D-6757-D0BA-DAB4-F60F158E74CC</TBUID>
			<Name>RDP (ATT&amp;CK T1076)</Name>
			<Description>This is a heuristics based DPI rule which detects Remote Desktop Protocol (RDP) traffic. 

Note: Configuration options are provided to set the event frequency of this rule.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>325</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="3201">
			<TBUID>6494BA67-FC6F-8A7C-8B7E-8200C89F429B</TBUID>
			<Name>Detected Too Many Suspicious TLS/SSL Client Hello Messages (ATT&amp;CK T1032)</Name>
			<Description>This is a heuristic rule intended to detect too many TLS/SSL Client Hello messages containing a Session Ticket extension with a non-zero Extension Length. With a large number of invalid session tickets, a remote attacker can cause a denial of service.

Note: Configuration options are provided to update the frequency of Client Hello messages.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>285</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>3</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>7.10</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="4994">
			<TBUID>ADACA313-19DA-DD8E-1AEE-A6B85F1823F4</TBUID>
			<Name>Telnet Client (ATT&amp;CK T1021)</Name>
			<Description>This is a heuristics based filter to detect Telnet client login attempts. Configuration options are provided to set the event frequency of this filter.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>325</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="5507">
			<TBUID>E5757B35-8397-BB7A-7581-1AA4474F43CA</TBUID>
			<Name>Portable Executable File Uploaded On SMB Share (ATT&amp;CK T1105)</Name>
			<Description>This rule is based on heuristics and will detect if Portable Executable (PE) structure file is being uploaded on a SMB share. Hence this rule should only be applied when PE files such as dll,exe etc. are not used over the SMB Share.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>343</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>1</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="4996">
			<TBUID>A17C30E7-1791-4319-3DC9-BD6728F0A5CA</TBUID>
			<Name>VNC Client (ATT&amp;CK T1076,T1219)</Name>
			<Description>This filter detects VNC client traffic based on heuristics. Configuration options are provided to set the event frequency of this filter.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>325</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="5509">
			<TBUID>8C0F0172-27CF-6338-BA73-11BBC9B1D6E2</TBUID>
			<Name>Identified Attempt To Brute Force Windows Login Credentials (ATT&amp;CK T1110)</Name>
			<Description>This filter identifies a brute force attempt to determine the Windows password by inspecting the number of failed logins in a time period. An attacker may use automated tools to iterate through all combinations or use a dictionary attack to guess passwords.

Note: Customers are advised to use the configuration options to tune the rule as per their environment.
This is a &quot;always log only&quot; rule.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>343</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.0.0.3000</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>9.30</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="4998">
			<TBUID>0184E04F-A479-B44D-95D1-E44840B4D1C2</TBUID>
			<Name>Dropbox (ATT&amp;CK T1102)</Name>
			<Description>This filter detects Dropbox file sharing client traffic based on heuristics. It also provides configuration options to set the event frequency of the filter.

Note: This filter only detects Dropbox client traffic and does not block it.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>320</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="5257">
			<TBUID>81FA56A6-9D7E-1CD5-799B-A01CF16A784C</TBUID>
			<Name>Identified Suspicious Obfuscated PDF Document (ATT&amp;CK T1027)</Name>
			<Description>This DPI rule is intended to block suspicious PDF documents which are obfuscated using lexical conventions. 

Note: This rule is always recommended when any version of PDF reader is installed on the computer.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>290</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>0</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>33569D94-0A79-8581-4ADF-FA9C285AD108</RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>1</RecommendationsMode>
			<CvssScore>9.30</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="5004">
			<TBUID>D38FFBE6-6785-E476-17BB-7C547EFB7A24</TBUID>
			<Name>IP Messenger (ATT&amp;CK T1102)</Name>
			<Description>This is a heuristics based filter to detect IP Messenger communication over the local area network. Configuration options are provided to set the event frequency of this filter.

NOTE: This rule will prevent only the outgoing IP Messenger traffic. To prevent the incoming IP messenger traffic please assign the rule, &quot;1004735 - Detected IP Messenger Server Traffic&quot;.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>322</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="5007">
			<TBUID>86703CF7-D0FD-AB47-C7F9-DE740B0E77E7</TBUID>
			<Name>MSN Messenger (ATT&amp;CK T1102)</Name>
			<Description>This is a heuristics based filter to detect MSN Instant Messenger Client login attempts. Configuration options are provided to set the event frequency of this filter.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>322</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="5008">
			<TBUID>07A80D80-E422-3BBC-BD0C-4028A77CE6FD</TBUID>
			<Name>MSN Messenger File Transfers (ATT&amp;CK T1102)</Name>
			<Description>This is a heuristics based filter to detect MSN Instant Messenger Client file transfers. Configuration options are provided to set the event frequency of this filter.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>322</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="5013">
			<TBUID>2B2CE9E2-0512-F86C-5910-54A01794B5E1</TBUID>
			<Name>TeamViewer (ATT&amp;CK T1219)</Name>
			<Description>This is a heuristics based filter which detects the usage of TeamViewer, a remote administration tool. Configuration options are provided to set the event frequency of this filter.

Note: This filter detects and blocks the use of TeamViewer</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>325</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="6293">
			<TBUID>04A0EF26-AD16-7F55-02F1-5415BD0C6F88</TBUID>
			<Name>Remote Schedule Task &apos;Run&apos; Through SMBv2 Protocol Detected (ATT&amp;CK T1053)</Name>
			<Description>This is a heuristic based rule which detects if &apos;Run&apos; Scheduled Tasks command is performed by the remote machine using &apos;SchTasks&apos; command line options through SMBv2 protocol.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>155</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>1</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>FD4D8D1F-99F2-1377-E674-405A840AF2A8</RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="5781">
			<TBUID>27AE76F0-A3F5-1F5A-7063-B522D7FD4498</TBUID>
			<Name>Detected SSLv3 Response (ATT&amp;CK T1032)</Name>
			<Description>This is a heuristic rule intended to detect SSL version 3.0 Response. 

Note: A configuration option is provided to set the event frequency and to create a whitelist of IP addresses that are allowed to communicate over SSLv3. The filter detects traffic in the default configuration.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>270</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>2</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>1</RecommendationsMode>
			<CvssScore>4.30</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="5014">
			<TBUID>F6A032C9-B1A6-490F-39C2-62D76B5507F9</TBUID>
			<Name>Windows Live FolderShare (ATT&amp;CK T1102)</Name>
			<Description>This filter detects Windows Live FolderShare (currently known as Windows Live Sync) P2P client traffic based on heuristics. It also provides configuration options to set the event frequency of the filter.
Note: This filter only detects FolderShare traffic and blocks non-encrypted transfers only.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>320</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="5782">
			<TBUID>EF0565F5-6CF3-9D9F-D62B-CA3555DAB99F</TBUID>
			<Name>Identified CBC Based Cipher Suite In SSLv3 Request (ATT&amp;CK T1032)</Name>
			<Description>This DPI rule detects the usage of CBC Based cipher suites in SSLv3.0 traffic. The CBC Based cipher suites use symmetric encryption algorithm in vulnerable SSL/TLS protocols to encrypt data with chained initialization vectors, which allows man-in-the-middle attackers to obtain plain-text HTTP headers via a block-wise chosen-boundary attack on an HTTPS session.

Note: CBC Based cipher suites in SSLv3.0 protocol are also used for legitimate purpose due to server limitations. Hence, every trigger of this rule should be investigated further to confirm an attack.  A configuration option is provided to set the event frequency and to create a whitelist of IP addresses that are allowed to communicate using CBC based cipher suite over SSLv3. The filter detects traffic in the default configuration.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>270</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>2</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>1</RecommendationsMode>
			<CvssScore>4.30</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="6294">
			<TBUID>D1C7058B-D3DF-A755-D4C4-06A92043DB39</TBUID>
			<Name>Remote Schedule Task &apos;Delete&apos; Through SMBv2 Protocol Detected (ATT&amp;CK T1053)</Name>
			<Description>This is a heuristic based rule which detects if &apos;Delete&apos; Scheduled Task command is performed by the remote machine using &apos;SchTasks&apos; command line options through SMBv2 protocol.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>155</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>1</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>FD4D8D1F-99F2-1377-E674-405A840AF2A8</RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="5015">
			<TBUID>56F3FDC1-C1B5-533C-44E1-B6F9FAEF668F</TBUID>
			<Name>Yahoo! Messenger File Transfers (ATT&amp;CK T1102)</Name>
			<Description>This is a heuristics based filter that blocks Yahoo! Messenger file transfers. Configuration options are provided to set the event frequency of this filter.

Note: The filter can not detect Yahoo Messenger File Transfer over HTTP connection method.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>322</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="6295">
			<TBUID>49AD70F0-B386-092C-FC92-16BB117B06EC</TBUID>
			<Name>Remote Schedule Task &apos;Create&apos; Through SMBv2 Protocol Detected (ATT&amp;CK T1053)</Name>
			<Description>This is a heuristic based rule which detects if &apos;Create&apos; Scheduled Task command is performed by the remote machine using &apos;SchTasks&apos; command line options through SMBv2 protocol.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>155</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>1</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>FD4D8D1F-99F2-1377-E674-405A840AF2A8</RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="5272">
			<TBUID>4B9486A7-4467-A201-8CE9-96CAC6D7E46F</TBUID>
			<Name>Identified Suspicious China Chopper Webshell Communication (ATT&amp;CK T1100)</Name>
			<Description>China Chopper Webshell is a malware designed to remotely access Windows or Linux Web servers. The malware has a Web shell command-and-control (CnC) client binary and a text-based Web shell payload (server component). Post infection, the malware enables remote attackers to execute arbitrary code on affected systems. This is a heuristic based rule which detects the HTTP communication of China chopper Webshell.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>263</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>FB4EB0C1-8C61-9C57-D027-A182AA0A8769</RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="3225">
			<TBUID>2EAA7499-BB60-8551-93D2-0CD1B52D5F64</TBUID>
			<Name>Detected SSLv3 Request (ATT&amp;CK T1032)</Name>
			<Description>This is a heuristic rule intended to detect SSL version 3.0 Request.

Note: Configuration options are provided to set the event frequency of this filter.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>303</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>2</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>5.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="2458">
			<TBUID>651E6A95-101D-F515-9353-D49A5E42ED6B</TBUID>
			<Name>Identified Weak Cipher Support From TLS/SSL Server (ATT&amp;CK T1032)</Name>
			<Description>TLS/SSL server supporting cipher suites based on weak algorithms may enable an attacker to launch man-in-the-middle attacks and monitor or tamper with sensitive data. In general, these ciphers are considered weak.
This is a heuristic based rule, which logs SSL traffic with weak Cipher.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>285</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>1</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>0.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="1950">
			<TBUID>1A1E90E1-BDAC-1270-FE69-3FB98BF24EA0</TBUID>
			<Name>Detected SSH Server Traffic (ATT&amp;CK T1021)</Name>
			<Description>This filter detects SSH server traffic based on heuristics. Configuration options are provided to set the event frequency of this filter.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>350</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="7070">
			<TBUID>FDBE0725-C0E3-AAB8-DBD7-05A0CBA15F09</TBUID>
			<Name>Identified Usage Of PAExec Command Line Tool (ATT&amp;CK T1035)</Name>
			<Description>PAExec is a command line tool that execute processes on remote systems and redirect console application output to the local system so that these applications appear to be running locally. This rule identifies the use of PAExec tool through SMB share. PAExec is very powerful tool and used by malware and exploits for lateral movement in the network.

Note: Administrators are suggested to add trusted IP addresses in the configuration page. The rule will block all PAExec attempts unless configured.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>343</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>1</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="7071">
			<TBUID>601AC30F-F8C6-7EAC-F428-47D9F40A8958</TBUID>
			<Name>Identify Downloading Of PowerShell Scripts Through SMB Share (ATT&amp;CK T1086)</Name>
			<Description>PowerShell may also be used to download and run PowerShell scripts from the Internet, which can be executed from disk or in memory without touching disk. Adversaries may use PowerShell to execute malicious PowerShell scripts that may cause Damage of the system.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>355</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>1</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="7072">
			<TBUID>C87AE28B-2FE6-F999-0517-9D7F2A4B8F04</TBUID>
			<Name>WinRM Service Detected &amp; Powershell RCE Over HTTP - Client (ATT&amp;CK T1028)</Name>
			<Description>Windows Remote Management (WinRM) is the name of both a Windows service and a protocol that allows a user to interact with a remote system (e.g., run an executable, modify the Registry, modify services). This filter detects its generic usage as well as through PowerShell.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>377</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>2</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="6561">
			<TBUID>D01CA71F-E43D-C9DE-BE47-01E5D32979E3</TBUID>
			<Name>Identified Remote Service Creation Over DCE/RPC Protocol (ATT&amp;CK T1050)</Name>
			<Description>This rule detects remote service creation over DCE/RPC protocol. Adversaries may install a new service that can be configured to execute at startup by using utilities to interact with services or by directly modifying the registry. These services can be leverage to escalate privileges from administrator to SYSTEM.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>155</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>FD4D8D1F-99F2-1377-E674-405A840AF2A8</RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="7073">
			<TBUID>24786B45-FCA8-276F-95BE-20AE5AF52817</TBUID>
			<Name>WinRM Service Detected &amp; Powershell RCE Over HTTP (ATT&amp;CK T1028)</Name>
			<Description>Windows Remote Management (WinRM) is the name of both a Windows service and a protocol that allows a user to interact with a remote system (e.g., run an executable, modify the Registry, modify services). This filter detects its generic usage as well as through PowerShell.

Note: In some network environments, this rule can generate many triggers and will need further investigation to confirm an attack.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>371</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>3</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="5027">
			<TBUID>0A8B03D3-F512-B5BA-5AEA-E4D47E756E07</TBUID>
			<Name>Radmin (ATT&amp;CK T1219)</Name>
			<Description>This is a heuristics based filter which detects the usage of Radmin, a remote administration tool. Configuration options are provided to set the event frequency of this filter.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>325</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="2467">
			<TBUID>1951B82E-C7BB-98D5-2311-B5B50FFFEE8A</TBUID>
			<Name>Identified Finger Service Traffic (ATT&amp;CK T1021)</Name>
			<Description>&apos;finger&apos; service is a legacy service returning sensitive information about user accounts present on a given system. A remote attacker can use it to obtain valid account names and may perform further attacks.

Supported Platforms : non-Windows</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>350</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>1</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>0.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="5030">
			<TBUID>2BAFA882-67E9-F429-CF19-71D2903E1612</TBUID>
			<Name>SMTP Client (ATT&amp;CK T1071,T1048)</Name>
			<Description>This filter detects SMTP client traffic based on heuristics. Configuration options are provided to set the event frequency of this filter.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>323</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="5031">
			<TBUID>A63CCE01-A43F-23CF-404C-BA4D0CCD0766</TBUID>
			<Name>SSH Client (ATT&amp;CK T1032,T1071)</Name>
			<Description>This filter detects SSH client traffic based on heuristics. Configuration options are provided to set the event frequency of this filter.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>325</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="5032">
			<TBUID>A9AD2302-7802-E54D-69A2-D6D5CBE4BC3C</TBUID>
			<Name>SSL/TLS Client (ATT&amp;CK T1032, T1043, T1071)</Name>
			<Description>This DPI rule detects SSL/TLS client traffic based on heuristics.

Note: Configuration options are provided to set the protocols disallowed, ports monitored and event frequency of the rule.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>326</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="6838">
			<TBUID>836CA438-7F0F-2028-EFC8-E7F2083BA33F</TBUID>
			<Name>Remote File Copy Over FTP (ATT&amp;CK T1105)</Name>
			<Description>This rule detects download of a file over FTP.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>211</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="5047">
			<TBUID>FE85615F-46E5-C1C2-2980-7BC0645F2C29</TBUID>
			<Name>AOL Instant Messenger (ATT&amp;CK T1102)</Name>
			<Description>This is a heuristics based filter to detect AOL Instant Messenger(AIM) Client. Configuration options are provided to set the event frequency of this filter.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>322</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="4285">
			<TBUID>1734C6E1-E0E0-B0D8-A916-18494517EC84</TBUID>
			<Name>Identified Suspicious Obfuscated JavaScript - 4 (ATT&amp;CK T1027)</Name>
			<Description>This DPI rule detects suspicious obfuscated JavaScript used by attackers to bypass security and gain unauthorized access to the system.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>290</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>0</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>33569D94-0A79-8581-4ADF-FA9C285AD108</RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>9.30</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="6333">
			<TBUID>A6504E53-BD67-D664-9596-71E9FAF25F18</TBUID>
			<Name>SMB DLL Injection Exploit Detected (ATT&amp;CK T1039)</Name>
			<Description>This rule is based on heuristics and will detect dll injection attack is being performed using SMB share. This rule could generate many alerts on some network environment hence each trigger needs further investigation to ensure attack.

Note: This rule only detects traffic and does not block.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>355</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>1</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="5826">
			<TBUID>EEDF2004-D2AC-5F41-F61F-7920156BB1B3</TBUID>
			<Name>Identified Suspicious Remote Desktop Protocol (RDP) Brute Force Attempt (ATT&amp;CK T1110)</Name>
			<Description>This is a heuristic based rule which blocks the RDP brute force tool, which is being used by Ransomware to brute force the Remote Desktop credentials and spread in the network.

Note: In some network environment, this rule could generate lots of trigger, therefore trigger should be investigated further to confirm attack. Configuration options are provided to configure the alert frequency.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>361</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>9.30</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="4290">
			<TBUID>997BAEA7-A013-2804-2997-8917BA7C7D4E</TBUID>
			<Name>Disallow Upload Of An Archive File (ATT&amp;CK T1105)</Name>
			<Description>This is a heuristic based rule to identify the upload of Archive files to a Web Server. These files could be potentially harmful for running applications and could be used for further attacks.

Note: Configuration options have been provided to select the file extensions. Without configuration rule will not be able to identify the upload of any kind of archive files.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>311</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>10.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="4292">
			<TBUID>33569D94-0A79-8581-4ADF-FA9C285AD108</TBUID>
			<Name>HTTP Web Client Decoding</Name>
			<Description>This is a smart filter that decodes the Web Client traffic and is used by other web client filters.</Description>
			<Priority>1</Priority>
			<ConnectionTypeID>290</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>0</Mode>
			<MinimumAgentVersion>5.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>true</DependedOn>
			<RecommendationsMode>1</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="1220">
			<TBUID>9A31C777-ACF5-7627-77BC-4C4AFC21EEE7</TBUID>
			<Name>Detect UPX Packed Executable Download (ATT&amp;CK T1045)</Name>
			<Description>UPX is a universal file compressor and packer for executable files. This filter blocks the download to UPX packed executable files.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>290</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>9.30</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="4037">
			<TBUID>951A78C3-6587-9E41-5D67-7D30527F31D0</TBUID>
			<Name>Remote DeleteService Request Through SMBv1 Detected (ATT&amp;CK T1021)</Name>
			<Description>This is a heuristic based rule which detects if &apos;delete service&apos; request is performed by the remote machine using SMBv1 Protocol.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>343</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>1</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="5830">
			<TBUID>09864278-6E24-8737-6C58-5BDEF2BE872F</TBUID>
			<Name>Disallow Upload Of A PHP File (ATT&amp;CK T1105)</Name>
			<Description>This is a heuristic based rule to identify the upload of PHP files to a Web Server. These files could be potentially harmful for running applications and could be used for further attacks.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>311</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>FB4EB0C1-8C61-9C57-D027-A182AA0A8769</RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>10.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="3271">
			<TBUID>C3F60D6B-4B3D-4706-769C-923B8883B044</TBUID>
			<Name>Identified TLS/SSL RC4 Cipher Suite Is Being Supported (ATT&amp;CK T1032)</Name>
			<Description>The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via statistical analysis of ciphertext in a large number of sessions that use the same plaintext.

Note: This is a heuristic based rule which identifies the RC4 algorithm being used in SSL/TLS traffic.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>330</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>2</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>4.30</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="3015">
			<TBUID>F4CF6173-784D-DD76-2DBA-690C7360ACD1</TBUID>
			<Name>Web Application Possible Brute Force Attempt (ATT&amp;CK T1110)</Name>
			<Description>This rule blocks brute force attempt to web application by inspecting the number of error responses in a given time period. The IP address is blocked for 20 minutes after the brute force attempt is detected.

Note: Configuration option should be used to enter custom error response.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>263</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>3</Severity>
			<Mode>0</Mode>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>7.50</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="5064">
			<TBUID>5A38CC1C-DFD1-EA9F-CFBF-CBBCAC48B367</TBUID>
			<Name>Identified Potentially Malicious RAT Traffic - VI (ATT&amp;CK T1094)</Name>
			<Description>A remote access tool (or RAT) is a software used to access a remote computer often used for malicious activities. This smart rule identifies suspicious RAT traffic.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>271</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="4041">
			<TBUID>79E71E47-3284-5B91-FE9C-96058149524F</TBUID>
			<Name>Remote Registry Access Through SMBv2 Protocol Detected (ATT&amp;CK T1012)</Name>
			<Description>This is a heuristic based rule which detects if Windows registry is accessed through SMBv2 protocol by the remote user.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>343</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>1</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="4042">
			<TBUID>22F0E962-4842-3C0A-AED8-DB00245A0C7F</TBUID>
			<Name>Remote CreateService Request Detected Through SMBv1 Protocol (ATT&amp;CK T1021)</Name>
			<Description>This is a heuristic based rule which detects if &apos;Create&apos; request performed by the remote machine using SMBv1 protocol.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>343</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>1</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="4043">
			<TBUID>AD9D7B44-DFCF-3F48-0EE5-57B9F78DE8EB</TBUID>
			<Name>Remote Registry Access Through SMBv1 Protocol Detected (ATT&amp;CK T1012)</Name>
			<Description>This is a heuristic based rule which detects if Windows registry is accessed through SMBv1 protocol by the remote user.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>343</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>1</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="6347">
			<TBUID>3C504CA0-EE5D-BD57-1427-1EA210DB8BC8</TBUID>
			<Name>Windows Client Port Mapper Decoder</Name>
			<Description>Remote Procedure Call (RPC) is an interprocess communication (IPC) mechanism that enables data exchange and invocation of functionality residing in a different process. A client will call the endpoint mapper (EPM) at the server to ask for a &quot;well known&quot; service. The server will answer the client at which port this service is available. This rule decodes the port shared by the Server using DCE/RPC Endpoint Mapper (EPM) Protocol, and help other rules for monitoring traffic on the dynamically opened port.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>308</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>2</Severity>
			<Mode>0</Mode>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>true</DependedOn>
			<RecommendationsMode>1</RecommendationsMode>
			<CvssScore>5.80</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="4046">
			<TBUID>31178815-0E38-B70E-4904-2DCE2E00BE3A</TBUID>
			<Name>Remote Service Execution Through SMBv1 Detected (ATT&amp;CK T1021)</Name>
			<Description>This is a heuristic based rule which detects, if a service is being remotely executed through SMBv1 protocol using &apos;SC&apos; command line options.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>343</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>1</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="6864">
			<TBUID>B12D1654-B4C5-0091-7A6C-A2D1082FADA0</TBUID>
			<Name>Identified Twitter Command &amp; Control Communication (ATT&amp;CK T1102)</Name>
			<Description>Adversaries may use an existing, legitimate external Web service as a means for relaying commands to a compromised system. These commands may also include pointers to command and control (C2) infrastructure. Adversaries may post content, known as a dead drop resolver, on Web services with embedded (and often obfuscated/encoded) domains or IP addresses. Once infected, victims will reach out to and be redirected by these resolvers.

Note: Triggers of this rule have to be investigated further to confirm the attack.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>263</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>2</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>FB4EB0C1-8C61-9C57-D027-A182AA0A8769</RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="6865">
			<TBUID>8461A82F-23EF-C495-F151-4A923C58BC7D</TBUID>
			<Name>Identified Github Authentication (ATT&amp;CK T1102)</Name>
			<Description>This filter detects an attempt to authenticate to Github. GitHub is a web-based hosting service for software development projects that use the Git revision control system.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>326</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>3</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="6866">
			<TBUID>8BF5C21C-AA67-30B8-6E9F-B8248C2A5AA5</TBUID>
			<Name>Identified WhatsApp Registration (ATT&amp;CK T1102)</Name>
			<Description>This filter detects an attempt to register the WhatsApp application on a mobile device. WhatsApp is a mobile communication application available in all major mobile platforms. WhatsApp enables instant messaging and sending images, videos and audio.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>304</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>1</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="5330">
			<TBUID>0E42A205-5D8D-A2DF-8A00-246E6538BD26</TBUID>
			<Name>Identified Usage Of WMI Execute Methods - Client (ATT&amp;CK T1047)</Name>
			<Description>Windows Management Instrumentation Command-line (WMIC) is a command line tool that executes commands on remote systems and redirects console application output to the local system so that these applications appear to be running locally. This DPI rule identifies the use of WMI Process command through DCERPC request. WMIC is used by malwares and exploits for lateral movement in the network.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>308</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>3</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>3C504CA0-EE5D-BD57-1427-1EA210DB8BC8</RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="3043">
			<TBUID>918541B2-15F1-55AD-8066-09DFC7C1D35E</TBUID>
			<Name>Identified Compression Algorithm In SSL/TLS Message (ATT&amp;CK T1002)</Name>
			<Description>This DPI rule detects the usage of compression algorithm in SSL/TLS traffic. The TLS protocol can encrypt compressed data without properly obfuscating the length of the unencrypted data, which allows man-in-the-middle attackers to obtain plaintext HTTP headers by observing length differences during a series of guesses in which a string in an HTTP request potentially matches an unknown string in an HTTP header, aka a &quot;CRIME&quot; attack.

Note: Compression algorithm in SSL/TLS protocol is also used for legitimate purpose due to server limitations. Hence, every trigger of this rule should be investigated further to confirm an attack. Configuration options are provided to customize the alert frequency of the events.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>270</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>1</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>2.60</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="1252">
			<TBUID>59E33A96-FC95-4A6E-1CD7-8DE4D3FE58EF</TBUID>
			<Name>Telnet Server Possible Brute Force Attempt (ATT&amp;CK T1110)</Name>
			<Description>This filter detects a brute force attempt to gain the Telnet Server Password by inspecting the number of failed logins in a time period. An attacker may use automated tools to iterate through all combinations or use a dictionary attack to guess passwords.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>72</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>2</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.0.0.3000</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="4581">
			<TBUID>035CDEA3-8B6D-4E04-38BD-CBE1B777A984</TBUID>
			<Name>Identified Suspicious Obfuscated JavaScript - 3 (ATT&amp;CK T1027)</Name>
			<Description>This DPI rule detects suspicious obfuscated JavaScript used by attackers to bypass security and gain unauthorized access to the system. Legitimate web sites could also obfuscate code to reduce security exposure or for intellectual property protection.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>290</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>0</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>33569D94-0A79-8581-4ADF-FA9C285AD108</RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>9.30</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="3053">
			<TBUID>B27551E9-8AA6-781B-2036-178AEC769C61</TBUID>
			<Name>Identified OpenSSL DTLS Anonymous ECDH Cipher Suite (ATT&amp;CK T1032)</Name>
			<Description>This DPI rule detects the usage of anonymous ECDH ciphersuite in DTLS traffic. OpenSSL DTLS clients enabling anonymous ECDH ciphersuites are subject to a denial of service attack. A malicious server can crash the client with a null pointer dereference (read) by specifying an anonymous ECDH ciphersuite and sending carefully crafted handshake messages.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>257</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>2</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>4.30</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="3054">
			<TBUID>F2B3EC84-F1CB-EC42-8082-CEF905D85A10</TBUID>
			<Name>Identified OpenSSL SRP Cipher Suite In Server Hello Message (ATT&amp;CK T1032)</Name>
			<Description>This DPI rule detects the usage of SRP cipher suite in server hello message. OpenSSL clients enabling SRP ciphersuites are subject to a denial of service attack. A malicious server can crash the client with a null pointer dereference (read) by specifying an SRP ciphersuite even though it was not properly negotiated with the client.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>257</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>2</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>4.30</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="5614">
			<TBUID>82DC40AF-890E-EC7A-7A5A-FEC36C90CE01</TBUID>
			<Name>Yahoo! Messenger (ATT&amp;CK T1102)</Name>
			<Description>This is a heuristics based filter to detect Yahoo! Messenger Client login attempts. Configuration options are provided to set the event frequency of this filter.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>322</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>0</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="5870">
			<TBUID>625B1F4D-70F6-32E9-18F4-1A78C524E34D</TBUID>
			<Name>Heuristic Detection Of Suspicious Digital Certificate (ATT&amp;CK T1032)</Name>
			<Description>This rule heuristically detects the exchange of Secure Socket Layer (SSL) certificate, which is being used to create reverse HTTPS channel from compromised machine.

Note: Configuration options are provided to configure valid/legitimate CAs (Certificate Authority) if this rule detects any benign traffic.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>271</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="3312">
			<TBUID>B16C387F-03CE-5736-969D-97DBA7DEE6D2</TBUID>
			<Name>Identified Too Many SSL Alert Messages In SSLv3 Traffic (ATT&amp;CK T1032)</Name>
			<Description>This is a heuristic based rule to detect too many SSL alert messages from a server within a period of time. Such large number of alert messages could be an indication of block-wise chosen-boundary attack, which could allow an attacker to obtain plain-text HTTP headers on an HTTPS session using SSLv3 protocol.

Note: Configuration options are provided to customize the alert frequency of the events. Multiple alert messages in SSLv3.0 protocol can occur legitimately due to server limitations. Hence, every trigger of this rule should be investigated further to confirm an attack.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>303</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>2</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>4.30</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="5361">
			<TBUID>24067175-2201-16CA-9E17-DBC679E2DDF9</TBUID>
			<Name>Identified Usage Of PsExec Command Line Tool (ATT&amp;CK T1035)</Name>
			<Description>PsExec is a command line tool that execute processes on remote systems and redirect console application output to the local system so that these applications appear to be running locally. This rule identifies the use of PsExec tool through SMB share. PsExec is very powerful tool and used by malware and exploits for lateral movement in the network.

Note: Administrators are suggested to add trusted IP addresses in the configuration page. The rule will block all PsExec attempts unless configured.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>343</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>3</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>7.50</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="6902">
			<TBUID>16D7021A-AB44-5ABF-5FBC-57B2568E5477</TBUID>
			<Name>Telegram Bot API Usage (Used by Telecrypt) (ATT&amp;CK T1102)</Name>
			<Description>This filter detects an attempt to use the Telegram API.
Telegram is an instant messaging application. The service provides an interface to create custom communication bots.

NOTE: Telegram Bot service has been known to be used by malware like Telecrypt for communication.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>304</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>3</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="6903">
			<TBUID>5F0F8500-C649-D1BE-0E8E-A0559118AADE</TBUID>
			<Name>Detected Vkontakte Site Access Over HTTP (ATT&amp;CK T1102)</Name>
			<Description>Adversaries may use an existing, legitimate external Web service as a means for relaying commands to a compromised system. This filter detects an attempt to access the Vkontakte website.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>290</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>33569D94-0A79-8581-4ADF-FA9C285AD108</RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="2297">
			<TBUID>316BBC92-5762-B4CD-148F-7EA6754A1345</TBUID>
			<Name>Detected SSLv2 Request (ATT&amp;CK T1032)</Name>
			<Description>This is a heuristic rule intended to detect SSL Version 2 server traffic. Configuration options are provided to set the event frequency of this filter.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>350</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>10.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="6393">
			<TBUID>C5FA4C92-7095-998E-3669-BCAF00F50BF5</TBUID>
			<Name>Identified Suspicious HTTP Traffic (ATT&amp;CK T1048)</Name>
			<Description>HTTP traffic may contain malware traffic (such as worms, viruses, and spyware). This is a heuristics based rule to identify the harmful HTTP request.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>271</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="2298">
			<TBUID>36F79BF6-8AF5-39E2-071D-642D72E4B05D</TBUID>
			<Name>Detected SSLv2 Response (ATT&amp;CK T1032)</Name>
			<Description>This is a heuristic rule intended to detect SSL Version 2 client traffic. Configuration options are provided to set the event frequency of this filter.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>271</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>2</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>5.80</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="6394">
			<TBUID>EBE98016-F28E-F5CF-9A3C-EFDD3F7F5D5C</TBUID>
			<Name>Identified Potentially Malicious RAT Traffic - III (ATT&amp;CK T1094)</Name>
			<Description>A remote access tool (or RAT) is a software used to access a remote computer often used for malicious activities. This smart rule identifies suspicious RAT traffic.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>271</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="4861">
			<TBUID>D083181F-22B5-94E4-A691-7DC4A3966E73</TBUID>
			<Name>Detected Virtual Network Computing (VNC) Server Traffic (ATT&amp;CK T1021)</Name>
			<Description>This filter detects VNC server traffic based on heuristics. Configuration options are provided to customize ports to inspect or ignore traffic and to set the event frequency of this filter. After appropriate configuration, an event would indicate suspicious activity since VNC traffic over non-standard ports indicates the presence of a backdoor VNC server installation.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>350</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="6397">
			<TBUID>8EF9201A-F997-3E0D-DE63-91CADDAFB37F</TBUID>
			<Name>Identified Potentially Malicious RAT Traffic - I (ATT&amp;CK T1094)</Name>
			<Description>A remote access tool (or RAT) is a software used to access a remote computer often used for malicious activities. This smart rule identifies suspicious RAT traffic.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>271</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="6398">
			<TBUID>A636BE91-A497-55C7-1571-610925E5CBED</TBUID>
			<Name>Identified Potentially Malicious RAT Traffic - IV (ATT&amp;CK T1094)</Name>
			<Description>A remote access tool (or RAT) is a software used to access a remote computer often used for malicious activities. This smart rule identifies suspicious RAT traffic.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>271</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion></MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
		<PayloadFilter2 doNotMerge="true" id="6399">
			<TBUID>6DECAAA3-4C73-2AF3-CF41-64ACE8780F75</TBUID>
			<Name>Identified Potentially Malicious RAT Traffic - V (ATT&amp;CK T1094)</Name>
			<Description>A remote access tool (or RAT) is a software used to access a remote computer often used for malicious activities. This smart rule identifies suspicious RAT traffic.</Description>
			<Priority>2</Priority>
			<ConnectionTypeID>271</ConnectionTypeID>
			<ScheduleID isNull="true"/>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Severity>4</Severity>
			<Mode>1</Mode>
			<MinimumAgentVersion>5.2.0.5277</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<LogFirstPduTimeout>300</LogFirstPduTimeout>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Alert>false</Alert>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>3</RecommendationsMode>
			<CvssScore>-1.00</CvssScore>
			<DebugMode>false</DebugMode>
			<RuleContextID isNull="true"/>
		</PayloadFilter2>
	</PayloadFilter2s>
	<PayloadFilter2Overrides>
		<PayloadFilter2Override id="1">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2ID>3271</PayloadFilter2ID>
			<Mode isNull="true"/>
			<OverrideLog>false</OverrideLog>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Alert isNull="true"/>
			<OverrideSchedule>false</OverrideSchedule>
			<ScheduleID isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
			<DebugMode>false</DebugMode>
			<OverrideRuleContext>false</OverrideRuleContext>
			<RuleContextID isNull="true"/>
		</PayloadFilter2Override>
		<PayloadFilter2Override id="2">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2ID>4985</PayloadFilter2ID>
			<Mode isNull="true"/>
			<OverrideLog>false</OverrideLog>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Alert isNull="true"/>
			<OverrideSchedule>false</OverrideSchedule>
			<ScheduleID isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
			<DebugMode>false</DebugMode>
			<OverrideRuleContext>false</OverrideRuleContext>
			<RuleContextID isNull="true"/>
		</PayloadFilter2Override>
		<PayloadFilter2Override id="3">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2ID>5013</PayloadFilter2ID>
			<Mode isNull="true"/>
			<OverrideLog>false</OverrideLog>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Alert isNull="true"/>
			<OverrideSchedule>false</OverrideSchedule>
			<ScheduleID isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
			<DebugMode>false</DebugMode>
			<OverrideRuleContext>false</OverrideRuleContext>
			<RuleContextID isNull="true"/>
		</PayloadFilter2Override>
		<PayloadFilter2Override id="4">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2ID>4979</PayloadFilter2ID>
			<Mode isNull="true"/>
			<OverrideLog>false</OverrideLog>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Alert isNull="true"/>
			<OverrideSchedule>false</OverrideSchedule>
			<ScheduleID isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
			<DebugMode>false</DebugMode>
			<OverrideRuleContext>false</OverrideRuleContext>
			<RuleContextID isNull="true"/>
		</PayloadFilter2Override>
		<PayloadFilter2Override id="5">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2ID>4976</PayloadFilter2ID>
			<Mode isNull="true"/>
			<OverrideLog>false</OverrideLog>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Alert isNull="true"/>
			<OverrideSchedule>false</OverrideSchedule>
			<ScheduleID isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
			<DebugMode>false</DebugMode>
			<OverrideRuleContext>false</OverrideRuleContext>
			<RuleContextID isNull="true"/>
		</PayloadFilter2Override>
		<PayloadFilter2Override id="6">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2ID>4977</PayloadFilter2ID>
			<Mode isNull="true"/>
			<OverrideLog>false</OverrideLog>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Alert isNull="true"/>
			<OverrideSchedule>false</OverrideSchedule>
			<ScheduleID isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
			<DebugMode>false</DebugMode>
			<OverrideRuleContext>false</OverrideRuleContext>
			<RuleContextID isNull="true"/>
		</PayloadFilter2Override>
		<PayloadFilter2Override id="7">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2ID>3614</PayloadFilter2ID>
			<Mode isNull="true"/>
			<OverrideLog>false</OverrideLog>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Alert isNull="true"/>
			<OverrideSchedule>false</OverrideSchedule>
			<ScheduleID isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
			<DebugMode>false</DebugMode>
			<OverrideRuleContext>false</OverrideRuleContext>
			<RuleContextID isNull="true"/>
		</PayloadFilter2Override>
		<PayloadFilter2Override id="8">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2ID>3167</PayloadFilter2ID>
			<Mode isNull="true"/>
			<OverrideLog>false</OverrideLog>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Alert isNull="true"/>
			<OverrideSchedule>false</OverrideSchedule>
			<ScheduleID isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
			<DebugMode>false</DebugMode>
			<OverrideRuleContext>false</OverrideRuleContext>
			<RuleContextID isNull="true"/>
		</PayloadFilter2Override>
		<PayloadFilter2Override id="9">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2ID>3225</PayloadFilter2ID>
			<Mode isNull="true"/>
			<OverrideLog>false</OverrideLog>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Alert isNull="true"/>
			<OverrideSchedule>false</OverrideSchedule>
			<ScheduleID isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
			<DebugMode>false</DebugMode>
			<OverrideRuleContext>false</OverrideRuleContext>
			<RuleContextID isNull="true"/>
		</PayloadFilter2Override>
		<PayloadFilter2Override id="10">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2ID>4983</PayloadFilter2ID>
			<Mode isNull="true"/>
			<OverrideLog>false</OverrideLog>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Alert isNull="true"/>
			<OverrideSchedule>false</OverrideSchedule>
			<ScheduleID isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
			<DebugMode>false</DebugMode>
			<OverrideRuleContext>false</OverrideRuleContext>
			<RuleContextID isNull="true"/>
		</PayloadFilter2Override>
		<PayloadFilter2Override id="11">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2ID>4998</PayloadFilter2ID>
			<Mode isNull="true"/>
			<OverrideLog>false</OverrideLog>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Alert isNull="true"/>
			<OverrideSchedule>false</OverrideSchedule>
			<ScheduleID isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
			<DebugMode>false</DebugMode>
			<OverrideRuleContext>false</OverrideRuleContext>
			<RuleContextID isNull="true"/>
		</PayloadFilter2Override>
		<PayloadFilter2Override id="12">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2ID>5014</PayloadFilter2ID>
			<Mode isNull="true"/>
			<OverrideLog>false</OverrideLog>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Alert isNull="true"/>
			<OverrideSchedule>false</OverrideSchedule>
			<ScheduleID isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
			<DebugMode>false</DebugMode>
			<OverrideRuleContext>false</OverrideRuleContext>
			<RuleContextID isNull="true"/>
		</PayloadFilter2Override>
		<PayloadFilter2Override id="13">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2ID>4989</PayloadFilter2ID>
			<Mode isNull="true"/>
			<OverrideLog>false</OverrideLog>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Alert isNull="true"/>
			<OverrideSchedule>false</OverrideSchedule>
			<ScheduleID isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
			<DebugMode>false</DebugMode>
			<OverrideRuleContext>false</OverrideRuleContext>
			<RuleContextID isNull="true"/>
		</PayloadFilter2Override>
		<PayloadFilter2Override id="14">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2ID>5004</PayloadFilter2ID>
			<Mode isNull="true"/>
			<OverrideLog>false</OverrideLog>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Alert isNull="true"/>
			<OverrideSchedule>false</OverrideSchedule>
			<ScheduleID isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
			<DebugMode>false</DebugMode>
			<OverrideRuleContext>false</OverrideRuleContext>
			<RuleContextID isNull="true"/>
		</PayloadFilter2Override>
		<PayloadFilter2Override id="15">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2ID>5007</PayloadFilter2ID>
			<Mode isNull="true"/>
			<OverrideLog>false</OverrideLog>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Alert isNull="true"/>
			<OverrideSchedule>false</OverrideSchedule>
			<ScheduleID isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
			<DebugMode>false</DebugMode>
			<OverrideRuleContext>false</OverrideRuleContext>
			<RuleContextID isNull="true"/>
		</PayloadFilter2Override>
		<PayloadFilter2Override id="16">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2ID>5008</PayloadFilter2ID>
			<Mode isNull="true"/>
			<OverrideLog>false</OverrideLog>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Alert isNull="true"/>
			<OverrideSchedule>false</OverrideSchedule>
			<ScheduleID isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
			<DebugMode>false</DebugMode>
			<OverrideRuleContext>false</OverrideRuleContext>
			<RuleContextID isNull="true"/>
		</PayloadFilter2Override>
		<PayloadFilter2Override id="17">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2ID>5015</PayloadFilter2ID>
			<Mode isNull="true"/>
			<OverrideLog>false</OverrideLog>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Alert isNull="true"/>
			<OverrideSchedule>false</OverrideSchedule>
			<ScheduleID isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
			<DebugMode>false</DebugMode>
			<OverrideRuleContext>false</OverrideRuleContext>
			<RuleContextID isNull="true"/>
		</PayloadFilter2Override>
		<PayloadFilter2Override id="18">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2ID>5047</PayloadFilter2ID>
			<Mode isNull="true"/>
			<OverrideLog>false</OverrideLog>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Alert isNull="true"/>
			<OverrideSchedule>false</OverrideSchedule>
			<ScheduleID isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
			<DebugMode>false</DebugMode>
			<OverrideRuleContext>false</OverrideRuleContext>
			<RuleContextID isNull="true"/>
		</PayloadFilter2Override>
		<PayloadFilter2Override id="19">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2ID>5614</PayloadFilter2ID>
			<Mode isNull="true"/>
			<OverrideLog>false</OverrideLog>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Alert isNull="true"/>
			<OverrideSchedule>false</OverrideSchedule>
			<ScheduleID isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
			<DebugMode>false</DebugMode>
			<OverrideRuleContext>false</OverrideRuleContext>
			<RuleContextID isNull="true"/>
		</PayloadFilter2Override>
		<PayloadFilter2Override id="20">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2ID>5030</PayloadFilter2ID>
			<Mode isNull="true"/>
			<OverrideLog>false</OverrideLog>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Alert isNull="true"/>
			<OverrideSchedule>false</OverrideSchedule>
			<ScheduleID isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
			<DebugMode>false</DebugMode>
			<OverrideRuleContext>false</OverrideRuleContext>
			<RuleContextID isNull="true"/>
		</PayloadFilter2Override>
		<PayloadFilter2Override id="21">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2ID>5032</PayloadFilter2ID>
			<Mode isNull="true"/>
			<OverrideLog>false</OverrideLog>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Alert isNull="true"/>
			<OverrideSchedule>false</OverrideSchedule>
			<ScheduleID isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
			<DebugMode>false</DebugMode>
			<OverrideRuleContext>false</OverrideRuleContext>
			<RuleContextID isNull="true"/>
		</PayloadFilter2Override>
		<PayloadFilter2Override id="22">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2ID>2121</PayloadFilter2ID>
			<Mode isNull="true"/>
			<OverrideLog>false</OverrideLog>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Alert isNull="true"/>
			<OverrideSchedule>false</OverrideSchedule>
			<ScheduleID isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
			<DebugMode>false</DebugMode>
			<OverrideRuleContext>false</OverrideRuleContext>
			<RuleContextID isNull="true"/>
		</PayloadFilter2Override>
		<PayloadFilter2Override id="23">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2ID>2298</PayloadFilter2ID>
			<Mode isNull="true"/>
			<OverrideLog>false</OverrideLog>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Alert isNull="true"/>
			<OverrideSchedule>false</OverrideSchedule>
			<ScheduleID isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
			<DebugMode>false</DebugMode>
			<OverrideRuleContext>false</OverrideRuleContext>
			<RuleContextID isNull="true"/>
		</PayloadFilter2Override>
		<PayloadFilter2Override id="24">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2ID>5781</PayloadFilter2ID>
			<Mode isNull="true"/>
			<OverrideLog>false</OverrideLog>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Alert isNull="true"/>
			<OverrideSchedule>false</OverrideSchedule>
			<ScheduleID isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
			<DebugMode>false</DebugMode>
			<OverrideRuleContext>false</OverrideRuleContext>
			<RuleContextID isNull="true"/>
		</PayloadFilter2Override>
		<PayloadFilter2Override id="25">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2ID>2297</PayloadFilter2ID>
			<Mode isNull="true"/>
			<OverrideLog>false</OverrideLog>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Alert isNull="true"/>
			<OverrideSchedule>false</OverrideSchedule>
			<ScheduleID isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
			<DebugMode>false</DebugMode>
			<OverrideRuleContext>false</OverrideRuleContext>
			<RuleContextID isNull="true"/>
		</PayloadFilter2Override>
		<PayloadFilter2Override id="26">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2ID>1307</PayloadFilter2ID>
			<Mode isNull="true"/>
			<OverrideLog>false</OverrideLog>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Alert isNull="true"/>
			<OverrideSchedule>false</OverrideSchedule>
			<ScheduleID isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
			<DebugMode>false</DebugMode>
			<OverrideRuleContext>false</OverrideRuleContext>
			<RuleContextID isNull="true"/>
		</PayloadFilter2Override>
		<PayloadFilter2Override id="27">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2ID>1309</PayloadFilter2ID>
			<Mode isNull="true"/>
			<OverrideLog>false</OverrideLog>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Alert isNull="true"/>
			<OverrideSchedule>false</OverrideSchedule>
			<ScheduleID isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
			<DebugMode>false</DebugMode>
			<OverrideRuleContext>false</OverrideRuleContext>
			<RuleContextID isNull="true"/>
		</PayloadFilter2Override>
		<PayloadFilter2Override id="28">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2ID>1950</PayloadFilter2ID>
			<Mode isNull="true"/>
			<OverrideLog>false</OverrideLog>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Alert isNull="true"/>
			<OverrideSchedule>false</OverrideSchedule>
			<ScheduleID isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
			<DebugMode>false</DebugMode>
			<OverrideRuleContext>false</OverrideRuleContext>
			<RuleContextID isNull="true"/>
		</PayloadFilter2Override>
		<PayloadFilter2Override id="29">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2ID>4990</PayloadFilter2ID>
			<Mode isNull="true"/>
			<OverrideLog>false</OverrideLog>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Alert isNull="true"/>
			<OverrideSchedule>false</OverrideSchedule>
			<ScheduleID isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
			<DebugMode>false</DebugMode>
			<OverrideRuleContext>false</OverrideRuleContext>
			<RuleContextID isNull="true"/>
		</PayloadFilter2Override>
		<PayloadFilter2Override id="30">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2ID>4996</PayloadFilter2ID>
			<Mode isNull="true"/>
			<OverrideLog>false</OverrideLog>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Alert isNull="true"/>
			<OverrideSchedule>false</OverrideSchedule>
			<ScheduleID isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
			<DebugMode>false</DebugMode>
			<OverrideRuleContext>false</OverrideRuleContext>
			<RuleContextID isNull="true"/>
		</PayloadFilter2Override>
		<PayloadFilter2Override id="31">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2ID>5027</PayloadFilter2ID>
			<Mode isNull="true"/>
			<OverrideLog>false</OverrideLog>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Alert isNull="true"/>
			<OverrideSchedule>false</OverrideSchedule>
			<ScheduleID isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
			<DebugMode>false</DebugMode>
			<OverrideRuleContext>false</OverrideRuleContext>
			<RuleContextID isNull="true"/>
		</PayloadFilter2Override>
		<PayloadFilter2Override id="32">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2ID>5031</PayloadFilter2ID>
			<Mode isNull="true"/>
			<OverrideLog>false</OverrideLog>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Alert isNull="true"/>
			<OverrideSchedule>false</OverrideSchedule>
			<ScheduleID isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
			<DebugMode>false</DebugMode>
			<OverrideRuleContext>false</OverrideRuleContext>
			<RuleContextID isNull="true"/>
		</PayloadFilter2Override>
		<PayloadFilter2Override id="33">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2ID>4994</PayloadFilter2ID>
			<Mode isNull="true"/>
			<OverrideLog>false</OverrideLog>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Alert isNull="true"/>
			<OverrideSchedule>false</OverrideSchedule>
			<ScheduleID isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
			<DebugMode>false</DebugMode>
			<OverrideRuleContext>false</OverrideRuleContext>
			<RuleContextID isNull="true"/>
		</PayloadFilter2Override>
		<PayloadFilter2Override id="34">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2ID>4861</PayloadFilter2ID>
			<Mode isNull="true"/>
			<OverrideLog>false</OverrideLog>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Alert isNull="true"/>
			<OverrideSchedule>false</OverrideSchedule>
			<ScheduleID isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
			<DebugMode>false</DebugMode>
			<OverrideRuleContext>false</OverrideRuleContext>
			<RuleContextID isNull="true"/>
		</PayloadFilter2Override>
		<PayloadFilter2Override id="35">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2ID>1358</PayloadFilter2ID>
			<Mode isNull="true"/>
			<OverrideLog>false</OverrideLog>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Alert isNull="true"/>
			<OverrideSchedule>false</OverrideSchedule>
			<ScheduleID isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
			<DebugMode>false</DebugMode>
			<OverrideRuleContext>false</OverrideRuleContext>
			<RuleContextID isNull="true"/>
		</PayloadFilter2Override>
		<PayloadFilter2Override id="36">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2ID>5782</PayloadFilter2ID>
			<Mode isNull="true"/>
			<OverrideLog>false</OverrideLog>
			<DisableLog>false</DisableLog>
			<LogPacketDrop>true</LogPacketDrop>
			<LogPacketModify>true</LogPacketModify>
			<IncludePacketData>false</IncludePacketData>
			<Alert isNull="true"/>
			<OverrideSchedule>false</OverrideSchedule>
			<ScheduleID isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
			<DebugMode>false</DebugMode>
			<OverrideRuleContext>false</OverrideRuleContext>
			<RuleContextID isNull="true"/>
		</PayloadFilter2Override>
	</PayloadFilter2Overrides>
	<PayloadFilter2Metadatas>
		<PayloadFilter2Metadata doNotMerge="true" id="521">
			<TBUID>22700671-3E03-2EB2-5F8E-D78F763084CE</TBUID>
			<Version>30</Version>
			<PayloadFilter2ID>4177</PayloadFilter2ID>
			<Name>certList</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="523">
			<TBUID>9613F37D-6485-058E-BB89-B316B55C9092</TBUID>
			<Version>2</Version>
			<PayloadFilter2ID>4290</PayloadFilter2ID>
			<Name>zipfile</Name>
			<Value>false</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="524">
			<TBUID>E08A93B4-BBD8-3849-195C-808952735DEF</TBUID>
			<Version>2</Version>
			<PayloadFilter2ID>4290</PayloadFilter2ID>
			<Name>rarfile</Name>
			<Value>false</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="525">
			<TBUID>FC975BF0-656B-CCDF-3092-26E3BFB5608A</TBUID>
			<Version>2</Version>
			<PayloadFilter2ID>4290</PayloadFilter2ID>
			<Name>gzipfile</Name>
			<Value>false</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="526">
			<TBUID>AD3DDD04-6E51-5813-14E2-E831E55F99C1</TBUID>
			<Version>2</Version>
			<PayloadFilter2ID>4290</PayloadFilter2ID>
			<Name>bz2file</Name>
			<Value>false</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="16">
			<TBUID>C159CCDA-8DE5-9F31-8ED0-36C1A71EE05D</TBUID>
			<Version>3</Version>
			<PayloadFilter2ID>1252</PayloadFilter2ID>
			<Name>nfailures</Name>
			<Value>10</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="17">
			<TBUID>600D4BE7-FE81-4CA3-26F6-845F431255B4</TBUID>
			<Version>3</Version>
			<PayloadFilter2ID>1252</PayloadFilter2ID>
			<Name>mseconds</Name>
			<Value>60</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="19">
			<TBUID>19E0D71F-E9B7-B1A8-1099-E3E5ABC935DF</TBUID>
			<Version>7</Version>
			<PayloadFilter2ID>1220</PayloadFilter2ID>
			<Name>commands</Name>
			<Value>upx_test.exe</Value>
			<UserEditable>false</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="541">
			<TBUID>69F5A1C8-FE8E-A4B6-9789-3299114F38F4</TBUID>
			<Version>9</Version>
			<PayloadFilter2ID>5665</PayloadFilter2ID>
			<Name>nfailures</Name>
			<Value>5</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="30">
			<TBUID>E6BA7B03-94BD-0F62-B15E-3234E1F1FF4F</TBUID>
			<Version>1</Version>
			<PayloadFilter2ID>1307</PayloadFilter2ID>
			<Name>ignorePorts</Name>
			<Value>513</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="542">
			<TBUID>653A4D37-A206-EF68-69C9-CD9C9A3E6D57</TBUID>
			<Version>9</Version>
			<PayloadFilter2ID>5665</PayloadFilter2ID>
			<Name>mseconds</Name>
			<Value>25</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="31">
			<TBUID>5258180D-6124-5240-323D-64AB7E1B52D7</TBUID>
			<Version>1</Version>
			<PayloadFilter2ID>1307</PayloadFilter2ID>
			<Name>rangetype</Name>
			<Value>all</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="543">
			<TBUID>AB03B90E-BF4F-104E-4235-F247691A45AD</TBUID>
			<Version>9</Version>
			<PayloadFilter2ID>5665</PayloadFilter2ID>
			<Name>Invalid</Name>
			<Value>Authentication failed
Access denied
logon failure</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="32">
			<TBUID>1FDBA16B-96E1-6E88-3400-42B3915F6697</TBUID>
			<Version>1</Version>
			<PayloadFilter2ID>1307</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>always</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="33">
			<TBUID>396C383A-2275-7813-0131-D4E64D4EFDF5</TBUID>
			<Version>1</Version>
			<PayloadFilter2ID>1307</PayloadFilter2ID>
			<Name>n</Name>
			<Value>86400</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="548">
			<TBUID>CF24C3B4-0BC3-0B30-4CE1-92198DB454F3</TBUID>
			<Version>4</Version>
			<PayloadFilter2ID>4976</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>secs</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="549">
			<TBUID>827ECEC8-20D4-AAD8-53A1-6D91D5505416</TBUID>
			<Version>4</Version>
			<PayloadFilter2ID>4976</PayloadFilter2ID>
			<Name>n</Name>
			<Value>86400</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="550">
			<TBUID>CE34540F-0C3F-3BD0-3150-7799FB0A2E56</TBUID>
			<Version>5</Version>
			<PayloadFilter2ID>4977</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>secs</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="551">
			<TBUID>4E8C4D8F-910D-483D-C527-D870812A07D7</TBUID>
			<Version>5</Version>
			<PayloadFilter2ID>4977</PayloadFilter2ID>
			<Name>n</Name>
			<Value>86400</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="48">
			<TBUID>8725FA2D-20F1-83F1-9E4D-5AB5440F3026</TBUID>
			<Version>7</Version>
			<PayloadFilter2ID>1309</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>secs</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="49">
			<TBUID>642F5050-AD35-AE1A-6891-EE05F20D0104</TBUID>
			<Version>7</Version>
			<PayloadFilter2ID>1309</PayloadFilter2ID>
			<Name>n</Name>
			<Value>1800</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="50">
			<TBUID>DAA0720D-3634-04EF-5DE4-85B576A9EDC7</TBUID>
			<Version>7</Version>
			<PayloadFilter2ID>1309</PayloadFilter2ID>
			<Name>ignorePorts</Name>
			<Value>23</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="51">
			<TBUID>20BEF6C1-D029-F804-3281-C02DAF011FC1</TBUID>
			<Version>7</Version>
			<PayloadFilter2ID>1309</PayloadFilter2ID>
			<Name>rangetype</Name>
			<Value>all</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="64">
			<TBUID>405A9C63-673D-71F8-D855-463AF628F628</TBUID>
			<Version>18</Version>
			<PayloadFilter2ID>5030</PayloadFilter2ID>
			<Name>ignorePorts</Name>
			<Value>25</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="65">
			<TBUID>FF52EBA6-4A5E-F140-6858-2EB55FBEAD8E</TBUID>
			<Version>18</Version>
			<PayloadFilter2ID>5030</PayloadFilter2ID>
			<Name>rangetype</Name>
			<Value>all</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="66">
			<TBUID>70CFE082-4B6B-1AB0-8C51-4E67B582FEF5</TBUID>
			<Version>20</Version>
			<PayloadFilter2ID>5030</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>secs</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="67">
			<TBUID>64D92E3A-ACD4-4BEB-C1D2-2222C5B8B5E7</TBUID>
			<Version>20</Version>
			<PayloadFilter2ID>5030</PayloadFilter2ID>
			<Name>n</Name>
			<Value>86400</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="68">
			<TBUID>CD2A5976-5907-69F5-12F1-772AECF16A0C</TBUID>
			<Version>8</Version>
			<PayloadFilter2ID>5027</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>secs</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="69">
			<TBUID>CE690C3F-7CFE-4CB0-D45A-3F36D0E89628</TBUID>
			<Version>8</Version>
			<PayloadFilter2ID>5027</PayloadFilter2ID>
			<Name>n</Name>
			<Value>1800</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="70">
			<TBUID>7394F697-EAAA-EDA9-A506-6A7F8F6DF31D</TBUID>
			<Version>7</Version>
			<PayloadFilter2ID>5027</PayloadFilter2ID>
			<Name>ignorePorts</Name>
			<Value>4899</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="71">
			<TBUID>30D04C90-3D8D-AD9F-6EF0-F3327C14E486</TBUID>
			<Version>7</Version>
			<PayloadFilter2ID>5027</PayloadFilter2ID>
			<Name>rangetype</Name>
			<Value>all</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="72">
			<TBUID>7C6E590F-32E0-8043-EFBB-F62C664558ED</TBUID>
			<Version>11</Version>
			<PayloadFilter2ID>5031</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>secs</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="73">
			<TBUID>ED05FE85-9D99-A619-4B38-48C759CECC1A</TBUID>
			<Version>11</Version>
			<PayloadFilter2ID>5031</PayloadFilter2ID>
			<Name>n</Name>
			<Value>1800</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="74">
			<TBUID>F6F5B362-8F6C-AECD-E8D8-B725E036C7E9</TBUID>
			<Version>8</Version>
			<PayloadFilter2ID>5031</PayloadFilter2ID>
			<Name>ignorePorts</Name>
			<Value>22</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="75">
			<TBUID>B1F64E4F-D5F2-DAE9-6617-AD391F77B10E</TBUID>
			<Version>8</Version>
			<PayloadFilter2ID>5031</PayloadFilter2ID>
			<Name>rangetype</Name>
			<Value>all</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="604">
			<TBUID>4A739BDD-0821-1FD7-41E3-32C51232FA35</TBUID>
			<Version>7</Version>
			<PayloadFilter2ID>4861</PayloadFilter2ID>
			<Name>ignorePorts</Name>
			<Value>5900</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="605">
			<TBUID>5E063965-6226-747C-FAC7-7C27639BEEDC</TBUID>
			<Version>7</Version>
			<PayloadFilter2ID>4861</PayloadFilter2ID>
			<Name>rangetype</Name>
			<Value>all</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="606">
			<TBUID>DA7B0284-382F-6ADF-0758-1AEE2C758748</TBUID>
			<Version>7</Version>
			<PayloadFilter2ID>4861</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>secs</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="607">
			<TBUID>73315C16-4F86-266D-FAED-96565F98A748</TBUID>
			<Version>7</Version>
			<PayloadFilter2ID>4861</PayloadFilter2ID>
			<Name>n</Name>
			<Value>300</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="98">
			<TBUID>D166B3DC-CB7A-2449-1EF7-9D41B1FD135E</TBUID>
			<Version>14</Version>
			<PayloadFilter2ID>1358</PayloadFilter2ID>
			<Name>ignorePorts</Name>
			<Value>6000</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="99">
			<TBUID>C39BDC87-3F29-0461-050A-E81EEDA28FEC</TBUID>
			<Version>14</Version>
			<PayloadFilter2ID>1358</PayloadFilter2ID>
			<Name>rangetype</Name>
			<Value>ignore</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="100">
			<TBUID>BD8F5B28-C081-D61C-3259-621E77828009</TBUID>
			<Version>14</Version>
			<PayloadFilter2ID>1358</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>secs</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="101">
			<TBUID>EA573887-1A08-2713-A255-94FEE4077E5E</TBUID>
			<Version>14</Version>
			<PayloadFilter2ID>1358</PayloadFilter2ID>
			<Name>n</Name>
			<Value>300</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="619">
			<TBUID>BF748151-C41C-A3F0-FAF5-0CC64396EE57</TBUID>
			<Version>8</Version>
			<PayloadFilter2ID>4979</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>conns</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="620">
			<TBUID>69708E12-8154-4C80-231F-3A5FFF0A8AFC</TBUID>
			<Version>8</Version>
			<PayloadFilter2ID>4979</PayloadFilter2ID>
			<Name>n</Name>
			<Value>86400</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="625">
			<TBUID>33439E62-D3B7-D865-19A4-517970E5C7E0</TBUID>
			<Version>13</Version>
			<PayloadFilter2ID>5015</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>secs</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="626">
			<TBUID>9A621622-76CF-890B-420B-8D9EDA0BCF7B</TBUID>
			<Version>13</Version>
			<PayloadFilter2ID>5015</PayloadFilter2ID>
			<Name>n</Name>
			<Value>86400</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="627">
			<TBUID>C07BD985-BFC0-A6B9-65AD-2997A7CBC6A5</TBUID>
			<Version>12</Version>
			<PayloadFilter2ID>5015</PayloadFilter2ID>
			<Name>ignorePorts</Name>
			<Value>5050</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="628">
			<TBUID>68669A0B-CE28-AC80-395C-3EBEA6D58868</TBUID>
			<Version>12</Version>
			<PayloadFilter2ID>5015</PayloadFilter2ID>
			<Name>rangetype</Name>
			<Value>all</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="128">
			<TBUID>30490889-6B63-52DF-738D-31A47672CC4F</TBUID>
			<Version>17</Version>
			<PayloadFilter2ID>5007</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>secs</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="129">
			<TBUID>7D9365D9-9188-0E6E-3455-4DB99E048A1F</TBUID>
			<Version>17</Version>
			<PayloadFilter2ID>5007</PayloadFilter2ID>
			<Name>n</Name>
			<Value>86400</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="641">
			<TBUID>6673AB95-A703-B239-AFF3-231F7D29D0E0</TBUID>
			<Version>30</Version>
			<PayloadFilter2ID>5047</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>secs</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="130">
			<TBUID>B9FC2C40-32B9-69BC-E499-F544E2D21F9E</TBUID>
			<Version>12</Version>
			<PayloadFilter2ID>5007</PayloadFilter2ID>
			<Name>ignorePorts</Name>
			<Value>1863</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="642">
			<TBUID>D1A5F0BB-D9DD-EB0F-EBB7-7AC4221B27A2</TBUID>
			<Version>30</Version>
			<PayloadFilter2ID>5047</PayloadFilter2ID>
			<Name>n</Name>
			<Value>86400</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="131">
			<TBUID>E571577E-B11E-59EA-E6F0-ED4F9315FFD6</TBUID>
			<Version>12</Version>
			<PayloadFilter2ID>5007</PayloadFilter2ID>
			<Name>rangetype</Name>
			<Value>all</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="643">
			<TBUID>E388EFEE-49A5-C2B8-B9DE-DD9596BF6EEB</TBUID>
			<Version>22</Version>
			<PayloadFilter2ID>5047</PayloadFilter2ID>
			<Name>ignorePorts</Name>
			<Value>5190</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="132">
			<TBUID>4D65D8D6-2188-C7C5-94E0-CB012EB8D6DD</TBUID>
			<Version>10</Version>
			<PayloadFilter2ID>5008</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>secs</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="644">
			<TBUID>073CFECE-6B40-8C94-238C-C5E560D9A1B3</TBUID>
			<Version>22</Version>
			<PayloadFilter2ID>5047</PayloadFilter2ID>
			<Name>rangetype</Name>
			<Value>all</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="133">
			<TBUID>91A824C9-CA46-DE80-7982-4969BF40BF21</TBUID>
			<Version>10</Version>
			<PayloadFilter2ID>5008</PayloadFilter2ID>
			<Name>n</Name>
			<Value>86400</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="134">
			<TBUID>7DC59A24-AA99-7BFA-D857-EAC39C990119</TBUID>
			<Version>9</Version>
			<PayloadFilter2ID>5008</PayloadFilter2ID>
			<Name>ignorePorts</Name>
			<Value>1863</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="135">
			<TBUID>5F719D91-3BDC-9877-AC12-2DE993AA92EE</TBUID>
			<Version>9</Version>
			<PayloadFilter2ID>5008</PayloadFilter2ID>
			<Name>rangetype</Name>
			<Value>all</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="149">
			<TBUID>61B7FBB5-4A10-5D63-D9FB-B85042033BAB</TBUID>
			<Version>4</Version>
			<PayloadFilter2ID>5013</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>secs</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="150">
			<TBUID>DC174F7C-0B26-8FAE-C61A-A3AE7FA272B5</TBUID>
			<Version>4</Version>
			<PayloadFilter2ID>5013</PayloadFilter2ID>
			<Name>n</Name>
			<Value>86400</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="151">
			<TBUID>BF20D2E8-C506-6373-F7AF-9F83360D73B8</TBUID>
			<Version>4</Version>
			<PayloadFilter2ID>5013</PayloadFilter2ID>
			<Name>ignorePorts</Name>
			<Value>1</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="152">
			<TBUID>002351BB-F320-53FC-B107-C6531A88503C</TBUID>
			<Version>4</Version>
			<PayloadFilter2ID>5013</PayloadFilter2ID>
			<Name>rangetype</Name>
			<Value>all</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="664">
			<TBUID>BDE62DD0-FC1E-C66B-F825-2FB316D38A84</TBUID>
			<Version>4</Version>
			<PayloadFilter2ID>5162</PayloadFilter2ID>
			<Name>TimeSeconds</Name>
			<Value>3600</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="173">
			<TBUID>B47A10EE-60CC-65E5-0968-0DFD5B42FCEE</TBUID>
			<Version>4</Version>
			<PayloadFilter2ID>2337</PayloadFilter2ID>
			<Name>nfailures</Name>
			<Value>10</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="174">
			<TBUID>855CE07B-BCB0-9815-D41B-6CAEDDEA74B3</TBUID>
			<Version>4</Version>
			<PayloadFilter2ID>2337</PayloadFilter2ID>
			<Name>mseconds</Name>
			<Value>60</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="688">
			<TBUID>F093F0E9-8431-4ACE-E24C-27141ED87216</TBUID>
			<Version>2</Version>
			<PayloadFilter2ID>5361</PayloadFilter2ID>
			<Name>AllowedIP</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="179">
			<TBUID>E0BB3CF2-765C-8B25-87E5-D6F3E82785E6</TBUID>
			<Version>14</Version>
			<PayloadFilter2ID>5004</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>secs</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="180">
			<TBUID>3A53E91C-4547-7964-3A4E-0BC9A65A8A7B</TBUID>
			<Version>14</Version>
			<PayloadFilter2ID>5004</PayloadFilter2ID>
			<Name>n</Name>
			<Value>86400</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="181">
			<TBUID>F81219D2-96DA-4ACA-5451-51C11B6FBFCD</TBUID>
			<Version>14</Version>
			<PayloadFilter2ID>5004</PayloadFilter2ID>
			<Name>ignorePorts</Name>
			<Value>2425</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="182">
			<TBUID>7BFDC6B9-0B98-A97F-A3E1-8DF6FB53E1F7</TBUID>
			<Version>14</Version>
			<PayloadFilter2ID>5004</PayloadFilter2ID>
			<Name>rangetype</Name>
			<Value>all</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="183">
			<TBUID>7C74432C-C33F-2598-DDC8-77C2956A3813</TBUID>
			<Version>9</Version>
			<PayloadFilter2ID>5014</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>secs</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="184">
			<TBUID>DF2B99DE-6668-55E9-0D36-8853E053E434</TBUID>
			<Version>9</Version>
			<PayloadFilter2ID>5014</PayloadFilter2ID>
			<Name>n</Name>
			<Value>86400</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="185">
			<TBUID>DF50EE1F-1948-17C0-1879-7B114A488A50</TBUID>
			<Version>9</Version>
			<PayloadFilter2ID>5014</PayloadFilter2ID>
			<Name>ignorePorts</Name>
			<Value>1</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="186">
			<TBUID>0D268841-D0BA-F64C-5F3D-25B14D5CF9E9</TBUID>
			<Version>9</Version>
			<PayloadFilter2ID>5014</PayloadFilter2ID>
			<Name>rangetype</Name>
			<Value>all</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="191">
			<TBUID>251DD8BF-069A-5B00-99AF-FF57A86B7F81</TBUID>
			<Version>5</Version>
			<PayloadFilter2ID>1950</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>secs</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="192">
			<TBUID>29CCEDA5-739E-DFFE-8444-CFC8FE206394</TBUID>
			<Version>5</Version>
			<PayloadFilter2ID>1950</PayloadFilter2ID>
			<Name>n</Name>
			<Value>18000</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="193">
			<TBUID>D0582461-CD91-F2FC-BC92-C754B569A2D0</TBUID>
			<Version>5</Version>
			<PayloadFilter2ID>1950</PayloadFilter2ID>
			<Name>ignorePorts</Name>
			<Value>22</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="194">
			<TBUID>2D80E425-BC8A-2CFD-7C4A-BDA6749F3E13</TBUID>
			<Version>5</Version>
			<PayloadFilter2ID>1950</PayloadFilter2ID>
			<Name>rangetype</Name>
			<Value>all</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="712">
			<TBUID>DEAA78F0-05E6-8D06-AAD6-80F05F023365</TBUID>
			<Version>21</Version>
			<PayloadFilter2ID>5509</PayloadFilter2ID>
			<Name>nfailures</Name>
			<Value>50</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="713">
			<TBUID>EBC21C87-42B0-F8F0-1374-8C6A6787B675</TBUID>
			<Version>21</Version>
			<PayloadFilter2ID>5509</PayloadFilter2ID>
			<Name>mseconds</Name>
			<Value>180</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="205">
			<TBUID>1BE524F9-5ADE-A00A-60CB-459D0D25B2FE</TBUID>
			<Version>16</Version>
			<PayloadFilter2ID>2121</PayloadFilter2ID>
			<Name>ignorePorts</Name>
			<Value>80,8080</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="206">
			<TBUID>845F1872-3C2B-B3F5-6EDC-C79ABF26CDDF</TBUID>
			<Version>16</Version>
			<PayloadFilter2ID>2121</PayloadFilter2ID>
			<Name>rangetype</Name>
			<Value>ignore</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="207">
			<TBUID>D2904AE9-EAEB-58D3-97C7-7978FDF47C94</TBUID>
			<Version>21</Version>
			<PayloadFilter2ID>2121</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>secs</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="208">
			<TBUID>C41F9D64-FCA6-D54F-FA40-6DF611EC0649</TBUID>
			<Version>21</Version>
			<PayloadFilter2ID>2121</PayloadFilter2ID>
			<Name>n</Name>
			<Value>86400</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="727">
			<TBUID>6B89EA11-9EA6-5000-4CCF-9AF1ED4EEF39</TBUID>
			<Version>26</Version>
			<PayloadFilter2ID>5614</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>secs</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="728">
			<TBUID>90283631-E0BE-3E4D-E74E-2DBC374F07BC</TBUID>
			<Version>26</Version>
			<PayloadFilter2ID>5614</PayloadFilter2ID>
			<Name>n</Name>
			<Value>86400</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="729">
			<TBUID>6564A2F3-AE87-7551-131D-28A83A73AEAC</TBUID>
			<Version>19</Version>
			<PayloadFilter2ID>5614</PayloadFilter2ID>
			<Name>ignorePorts</Name>
			<Value>80,8080</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="730">
			<TBUID>D2DFE40B-D711-56E7-C039-B853BB49104C</TBUID>
			<Version>19</Version>
			<PayloadFilter2ID>5614</PayloadFilter2ID>
			<Name>rangetype</Name>
			<Value>all</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="736">
			<TBUID>95C4B8BD-9A3F-5EDA-C9EE-47CE98A5F3FE</TBUID>
			<Version>10</Version>
			<PayloadFilter2ID>5781</PayloadFilter2ID>
			<Name>ignorePorts</Name>
			<Value>443</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="737">
			<TBUID>E4C54643-69DE-DDAF-B098-E9A8AEC79600</TBUID>
			<Version>10</Version>
			<PayloadFilter2ID>5781</PayloadFilter2ID>
			<Name>rangetype</Name>
			<Value>all</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="738">
			<TBUID>19F9034F-6490-4CEE-ADE8-FFDDA8933654</TBUID>
			<Version>11</Version>
			<PayloadFilter2ID>5781</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>secs</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="739">
			<TBUID>9B69E9E5-654C-D8D2-5952-30228C77DEC6</TBUID>
			<Version>11</Version>
			<PayloadFilter2ID>5781</PayloadFilter2ID>
			<Name>n</Name>
			<Value>1800</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="740">
			<TBUID>964DEF1C-5D05-2738-B89C-9C0AA02B85DA</TBUID>
			<Version>3</Version>
			<PayloadFilter2ID>5781</PayloadFilter2ID>
			<Name>AllowedIP</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="741">
			<TBUID>4C83235E-513C-2A35-8544-2734C577C729</TBUID>
			<Version>8</Version>
			<PayloadFilter2ID>5782</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>secs</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="230">
			<TBUID>9571A6FD-6C2F-F6CF-BA95-86FE44BE09E3</TBUID>
			<Version>7</Version>
			<PayloadFilter2ID>2297</PayloadFilter2ID>
			<Name>ignorePorts</Name>
			<Value>443</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="742">
			<TBUID>D5C45DF8-4896-0372-2DB8-4894CEC15265</TBUID>
			<Version>8</Version>
			<PayloadFilter2ID>5782</PayloadFilter2ID>
			<Name>n</Name>
			<Value>1800</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="231">
			<TBUID>0339E98F-46F1-6C94-3CEE-014BA48795DA</TBUID>
			<Version>7</Version>
			<PayloadFilter2ID>2297</PayloadFilter2ID>
			<Name>rangetype</Name>
			<Value>all</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="743">
			<TBUID>B8447FE7-BBC9-2AB7-7BD2-CCF989A0B891</TBUID>
			<Version>3</Version>
			<PayloadFilter2ID>5782</PayloadFilter2ID>
			<Name>AllowedIP</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="232">
			<TBUID>4B1E18A5-2F0F-99B8-9924-92B1975A4A84</TBUID>
			<Version>7</Version>
			<PayloadFilter2ID>2297</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>secs</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="233">
			<TBUID>FE3B6015-1D74-5F21-397E-C7C931BD1767</TBUID>
			<Version>7</Version>
			<PayloadFilter2ID>2297</PayloadFilter2ID>
			<Name>n</Name>
			<Value>86400</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="234">
			<TBUID>BB83E9FC-7D44-325D-4251-F5C1538AFE37</TBUID>
			<Version>4</Version>
			<PayloadFilter2ID>2298</PayloadFilter2ID>
			<Name>ignorePorts</Name>
			<Value>443</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="235">
			<TBUID>350BC353-54F2-2D98-BF51-C399157BF698</TBUID>
			<Version>4</Version>
			<PayloadFilter2ID>2298</PayloadFilter2ID>
			<Name>rangetype</Name>
			<Value>all</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="236">
			<TBUID>3598FA4A-4854-FC08-6671-2FF9B8D5922E</TBUID>
			<Version>4</Version>
			<PayloadFilter2ID>2298</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>secs</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="237">
			<TBUID>7271390A-2BB8-EADD-0DC5-2502AF289A3D</TBUID>
			<Version>4</Version>
			<PayloadFilter2ID>2298</PayloadFilter2ID>
			<Name>n</Name>
			<Value>86400</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="238">
			<TBUID>CEEEC4A4-DF93-DCF6-4E1C-F3592E29B18C</TBUID>
			<Version>14</Version>
			<PayloadFilter2ID>4996</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>secs</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="239">
			<TBUID>1DEEC0A7-BA43-1393-B1AE-04EFC3D355D8</TBUID>
			<Version>14</Version>
			<PayloadFilter2ID>4996</PayloadFilter2ID>
			<Name>n</Name>
			<Value>1800</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="240">
			<TBUID>9F82A41D-2261-AF9D-8257-5690866AC0F6</TBUID>
			<Version>13</Version>
			<PayloadFilter2ID>4996</PayloadFilter2ID>
			<Name>ignorePorts</Name>
			<Value>5900</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="241">
			<TBUID>6A2705AF-94C0-6D8C-1CBE-E2CEC4439B22</TBUID>
			<Version>13</Version>
			<PayloadFilter2ID>4996</PayloadFilter2ID>
			<Name>rangetype</Name>
			<Value>all</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="242">
			<TBUID>E62E82E6-AB8B-DD8B-14D6-6B7076E7C366</TBUID>
			<Version>12</Version>
			<PayloadFilter2ID>2330</PayloadFilter2ID>
			<Name>mode</Name>
			<Value>0</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="757">
			<TBUID>0E18A837-4915-2A16-8063-1B8CFCC15AB9</TBUID>
			<Version>4</Version>
			<PayloadFilter2ID>5826</PayloadFilter2ID>
			<Name>rdpreqs</Name>
			<Value>20</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="758">
			<TBUID>C0E62896-F5C8-98C1-5CF8-927C0BDF75D0</TBUID>
			<Version>4</Version>
			<PayloadFilter2ID>5826</PayloadFilter2ID>
			<Name>rdpsecs</Name>
			<Value>60</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="247">
			<TBUID>85E1E067-B4DA-2320-1E9D-0FE925405123</TBUID>
			<Version>12</Version>
			<PayloadFilter2ID>2338</PayloadFilter2ID>
			<Name>nfailures</Name>
			<Value>10</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="248">
			<TBUID>C26346AF-2D96-77DA-2F71-A4DCB8EBB766</TBUID>
			<Version>12</Version>
			<PayloadFilter2ID>2338</PayloadFilter2ID>
			<Name>mseconds</Name>
			<Value>60</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="763">
			<TBUID>D1BB38B5-312B-BD21-E30E-A57F01445727</TBUID>
			<Version>42</Version>
			<PayloadFilter2ID>5830</PayloadFilter2ID>
			<Name>AllowedFilesMimeType</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="764">
			<TBUID>C53D69B5-327F-B293-83BB-61E701A67832</TBUID>
			<Version>40</Version>
			<PayloadFilter2ID>5830</PayloadFilter2ID>
			<Name>jarfile</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="765">
			<TBUID>EBCC228A-01D4-DB0B-D301-42FC9A3FCBD8</TBUID>
			<Version>40</Version>
			<PayloadFilter2ID>5830</PayloadFilter2ID>
			<Name>phpfile</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="254">
			<TBUID>4871FA92-239E-964A-6CC7-28A7695B1BE7</TBUID>
			<Version>6</Version>
			<PayloadFilter2ID>2467</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>secs</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="766">
			<TBUID>946244F0-9FBF-D85D-DA79-E52B722ECF52</TBUID>
			<Version>40</Version>
			<PayloadFilter2ID>5830</PayloadFilter2ID>
			<Name>classfile</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="255">
			<TBUID>A6D4E6D8-E1A0-5CBD-B7CF-D26AB03858BA</TBUID>
			<Version>6</Version>
			<PayloadFilter2ID>2467</PayloadFilter2ID>
			<Name>n</Name>
			<Value>600</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="767">
			<TBUID>203AC9E6-750D-055E-1BF3-743BAF6A820C</TBUID>
			<Version>2</Version>
			<PayloadFilter2ID>5870</PayloadFilter2ID>
			<Name>certList</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="769">
			<TBUID>C0229D32-929E-6FFF-8541-B7997CD4360F</TBUID>
			<Version>78</Version>
			<PayloadFilter2ID>5912</PayloadFilter2ID>
			<Name>enableUTF8Encoding</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="770">
			<TBUID>5BF4C47C-823A-60B4-CA7B-D22CF53EEED3</TBUID>
			<Version>111</Version>
			<PayloadFilter2ID>5912</PayloadFilter2ID>
			<Name>useFormEncodedForMissingContentType</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="771">
			<TBUID>988ECCBC-71C3-31A4-E2CE-FA398B241CDD</TBUID>
			<Version>111</Version>
			<PayloadFilter2ID>5912</PayloadFilter2ID>
			<Name>useURInormalizationInPOST</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="772">
			<TBUID>0DF09D83-8FAD-0A77-3D10-9B6F8862EFC8</TBUID>
			<Version>111</Version>
			<PayloadFilter2ID>5912</PayloadFilter2ID>
			<Name>enableDoubleDecodingCheck</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="773">
			<TBUID>ADC77CE6-A77E-A7AF-3383-F401074118CA</TBUID>
			<Version>111</Version>
			<PayloadFilter2ID>5912</PayloadFilter2ID>
			<Name>URINormalizationLogPayloadData</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="774">
			<TBUID>DD95FCA6-80DD-0A41-4E09-0B649CD5D7FD</TBUID>
			<Version>93</Version>
			<PayloadFilter2ID>5912</PayloadFilter2ID>
			<Name>ResourcesWithNoURINormalization</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="775">
			<TBUID>A44083C2-62C3-BE97-FABC-65CEEA65EDCF</TBUID>
			<Version>86</Version>
			<PayloadFilter2ID>5912</PayloadFilter2ID>
			<Name>enableUTF8Check</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="776">
			<TBUID>CD5B857D-017C-B19E-891B-4A3A204FA212</TBUID>
			<Version>107</Version>
			<PayloadFilter2ID>5912</PayloadFilter2ID>
			<Name>URINormalizationPassive</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="777">
			<TBUID>EB70F76B-09FA-B011-5950-E9D51CF86CC3</TBUID>
			<Version>107</Version>
			<PayloadFilter2ID>5912</PayloadFilter2ID>
			<Name>useCustomDisallowedURICharacters</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="778">
			<TBUID>F66794AD-920D-7E5C-750B-0EDE0EBB18C4</TBUID>
			<Version>106</Version>
			<PayloadFilter2ID>5912</PayloadFilter2ID>
			<Name>CustomDisallowedURIQueryCharacters</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="779">
			<TBUID>3BA67ED4-5561-7E8E-7315-F247BB15F48F</TBUID>
			<Version>80</Version>
			<PayloadFilter2ID>5912</PayloadFilter2ID>
			<Name>disallowedRawCharacters</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="780">
			<TBUID>4FD6AD02-8B62-F70C-C4EF-5DCE043BEFFE</TBUID>
			<Version>108</Version>
			<PayloadFilter2ID>5912</PayloadFilter2ID>
			<Name>CustomDisallowedRawCharacters</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="781">
			<TBUID>D1804BF2-8442-64F1-4A5F-B70957DEA9E8</TBUID>
			<Version>76</Version>
			<PayloadFilter2ID>5912</PayloadFilter2ID>
			<Name>enableInvalidHexCheck</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="782">
			<TBUID>CE73954D-A73F-5B47-C175-BB423109F4DC</TBUID>
			<Version>84</Version>
			<PayloadFilter2ID>5912</PayloadFilter2ID>
			<Name>test</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="783">
			<TBUID>2DFD25CF-D420-1201-F067-B0403B5F6CA1</TBUID>
			<Version>75</Version>
			<PayloadFilter2ID>5912</PayloadFilter2ID>
			<Name>allowRawControlCharacters</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="272">
			<TBUID>5F544B75-B3D3-713F-823B-B155291A0889</TBUID>
			<Version>26</Version>
			<PayloadFilter2ID>4989</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>secs</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="784">
			<TBUID>C95D84AD-D535-5AD1-4B26-E387688D76F0</TBUID>
			<Version>78</Version>
			<PayloadFilter2ID>5912</PayloadFilter2ID>
			<Name>disallowRawControlCharacters</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="273">
			<TBUID>E48EAAAF-5A75-75A4-C5EC-4509F5DE622B</TBUID>
			<Version>26</Version>
			<PayloadFilter2ID>4989</PayloadFilter2ID>
			<Name>n</Name>
			<Value>86400</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="785">
			<TBUID>E1368097-9961-CAA2-1162-3DF2E9A6DC5A</TBUID>
			<Version>72</Version>
			<PayloadFilter2ID>5912</PayloadFilter2ID>
			<Name>encodingMethod</Name>
			<Value>2</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="274">
			<TBUID>D89AB18D-2192-7850-3E1A-4DC502BE159D</TBUID>
			<Version>26</Version>
			<PayloadFilter2ID>4989</PayloadFilter2ID>
			<Name>ignorePorts</Name>
			<Value>8000</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="786">
			<TBUID>B838AF18-8664-4FEE-0911-97A967E0667B</TBUID>
			<Version>70</Version>
			<PayloadFilter2ID>5912</PayloadFilter2ID>
			<Name>blockRequestWithoutHTTPVersion</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="275">
			<TBUID>5362645B-91C8-8417-7E00-CA756B0BCB9F</TBUID>
			<Version>26</Version>
			<PayloadFilter2ID>4989</PayloadFilter2ID>
			<Name>rangetype</Name>
			<Value>all</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="787">
			<TBUID>8BCF09E6-D6E0-A3EA-F2C7-15914EEDBC4D</TBUID>
			<Version>45</Version>
			<PayloadFilter2ID>5912</PayloadFilter2ID>
			<Name>URIConstraints</Name>
			<Value>1</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="276">
			<TBUID>D7A86A51-C63A-1C24-B297-2869FEC5E81E</TBUID>
			<Version>8</Version>
			<PayloadFilter2ID>2639</PayloadFilter2ID>
			<Name>AllowedEXEs</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="788">
			<TBUID>51964511-8F6A-7D60-C9D1-AF6E0DFAA62F</TBUID>
			<Version>44</Version>
			<PayloadFilter2ID>5912</PayloadFilter2ID>
			<Name>detectControlCharcters</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="789">
			<TBUID>97E82176-02C4-E7EE-3D24-17CCF21B47D5</TBUID>
			<Version>106</Version>
			<PayloadFilter2ID>5912</PayloadFilter2ID>
			<Name>CustomDisallowedURICharacters</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="802">
			<TBUID>1505CB27-0267-CA8A-A5E1-EA4156B5C254</TBUID>
			<Version>7</Version>
			<PayloadFilter2ID>6196</PayloadFilter2ID>
			<Name>failattempt</Name>
			<Value>20</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="803">
			<TBUID>88195FE9-9817-C027-AA4B-6E75E5659F93</TBUID>
			<Version>7</Version>
			<PayloadFilter2ID>6196</PayloadFilter2ID>
			<Name>timesec</Name>
			<Value>10</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="308">
			<TBUID>88528373-CE4E-0626-38CD-74F848B72E6C</TBUID>
			<Version>14</Version>
			<PayloadFilter2ID>4983</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>secs</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="309">
			<TBUID>CF369577-C41F-9FC8-8699-8B6BA6DD85EF</TBUID>
			<Version>14</Version>
			<PayloadFilter2ID>4983</PayloadFilter2ID>
			<Name>n</Name>
			<Value>86400</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="310">
			<TBUID>B67BBB8B-95E3-685C-10F3-380927002267</TBUID>
			<Version>11</Version>
			<PayloadFilter2ID>4983</PayloadFilter2ID>
			<Name>ignorePorts</Name>
			<Value>21</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="311">
			<TBUID>B4BD316E-1D35-3835-8C58-2A28E921FC90</TBUID>
			<Version>11</Version>
			<PayloadFilter2ID>4983</PayloadFilter2ID>
			<Name>rangetype</Name>
			<Value>all</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="828">
			<TBUID>13D3CD7C-9F73-F095-B1EB-021E0714834E</TBUID>
			<Version>1</Version>
			<PayloadFilter2ID>6226</PayloadFilter2ID>
			<Name>iVPDefaultOn</Name>
			<Value>yes</Value>
			<UserEditable>false</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="334">
			<TBUID>C00358DB-C41C-30D5-A65A-6BF26AB4A203</TBUID>
			<Version>4</Version>
			<PayloadFilter2ID>2880</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>always</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="335">
			<TBUID>78B21CCE-E319-8566-C48F-EAB93849D295</TBUID>
			<Version>4</Version>
			<PayloadFilter2ID>2880</PayloadFilter2ID>
			<Name>n</Name>
			<Value>86400</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="338">
			<TBUID>6109D4B9-DAAA-E89B-9F53-A9FBD5BAB321</TBUID>
			<Version>5</Version>
			<PayloadFilter2ID>2883</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>always</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="339">
			<TBUID>BF5E1675-8D90-7A26-1161-A69A3CBBD0A2</TBUID>
			<Version>5</Version>
			<PayloadFilter2ID>2883</PayloadFilter2ID>
			<Name>n</Name>
			<Value>86400</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="343">
			<TBUID>CC347D01-A74F-8F2C-CACA-B1FFB5C240BC</TBUID>
			<Version>11</Version>
			<PayloadFilter2ID>2923</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>secs</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="344">
			<TBUID>AF449421-8887-AFFC-4C92-FA9E557CF32C</TBUID>
			<Version>11</Version>
			<PayloadFilter2ID>2923</PayloadFilter2ID>
			<Name>n</Name>
			<Value>86400</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="345">
			<TBUID>A8D4974F-81EC-E0F3-8C46-D485BC19ABF5</TBUID>
			<Version>8</Version>
			<PayloadFilter2ID>2923</PayloadFilter2ID>
			<Name>count</Name>
			<Value>1000</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="346">
			<TBUID>F8C9E1F5-18B9-6C55-4BE1-252ED803773F</TBUID>
			<Version>8</Version>
			<PayloadFilter2ID>2923</PayloadFilter2ID>
			<Name>time</Name>
			<Value>30</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="355">
			<TBUID>E9A96575-7967-F6E5-F8AA-26F65E2A6540</TBUID>
			<Version>14</Version>
			<PayloadFilter2ID>4994</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>secs</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="867">
			<TBUID>5D2B40CE-4CE3-A939-F536-483932673DC6</TBUID>
			<Version>3</Version>
			<PayloadFilter2ID>6293</PayloadFilter2ID>
			<Name>iVPDefaultOn</Name>
			<Value>no</Value>
			<UserEditable>false</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="356">
			<TBUID>67067283-9E71-2E42-0C7E-4EEF2757A520</TBUID>
			<Version>14</Version>
			<PayloadFilter2ID>4994</PayloadFilter2ID>
			<Name>n</Name>
			<Value>1800</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="868">
			<TBUID>AA834B1C-6448-0EA6-40D5-AE2DB4A8803E</TBUID>
			<Version>3</Version>
			<PayloadFilter2ID>6294</PayloadFilter2ID>
			<Name>iVPDefaultOn</Name>
			<Value>no</Value>
			<UserEditable>false</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="357">
			<TBUID>74117262-B62C-1443-4DF0-61CFB16F2CD3</TBUID>
			<Version>10</Version>
			<PayloadFilter2ID>4994</PayloadFilter2ID>
			<Name>ignorePorts</Name>
			<Value>23</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="869">
			<TBUID>5133123E-BF92-29CD-D70F-2B0AAAD1A8DE</TBUID>
			<Version>4</Version>
			<PayloadFilter2ID>6295</PayloadFilter2ID>
			<Name>iVPDefaultOn</Name>
			<Value>no</Value>
			<UserEditable>false</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="358">
			<TBUID>61191C17-5050-9113-F55C-CB80D50F4475</TBUID>
			<Version>10</Version>
			<PayloadFilter2ID>4994</PayloadFilter2ID>
			<Name>rangetype</Name>
			<Value>all</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="359">
			<TBUID>A3385015-4819-F620-077E-AC27FF5B47D2</TBUID>
			<Version>9</Version>
			<PayloadFilter2ID>4985</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>secs</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="360">
			<TBUID>AD382698-EA1B-DDE6-5230-E4AF306FC6AA</TBUID>
			<Version>9</Version>
			<PayloadFilter2ID>4985</PayloadFilter2ID>
			<Name>n</Name>
			<Value>86400</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="361">
			<TBUID>0161F33E-5B4E-E6A7-6C66-72C7A08FCDBA</TBUID>
			<Version>8</Version>
			<PayloadFilter2ID>4985</PayloadFilter2ID>
			<Name>ignorePorts</Name>
			<Value>5222</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="362">
			<TBUID>1EB790B9-DCB0-76D0-FE82-0620FD3EAB98</TBUID>
			<Version>8</Version>
			<PayloadFilter2ID>4985</PayloadFilter2ID>
			<Name>rangetype</Name>
			<Value>all</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="371">
			<TBUID>6D9E07C0-0E28-70C6-8342-F98ED85ACB1D</TBUID>
			<Version>16</Version>
			<PayloadFilter2ID>3015</PayloadFilter2ID>
			<Name>nfailures</Name>
			<Value>10</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="372">
			<TBUID>747D195B-EFD2-6A43-F9E8-586C3736F456</TBUID>
			<Version>16</Version>
			<PayloadFilter2ID>3015</PayloadFilter2ID>
			<Name>mseconds</Name>
			<Value>25</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="373">
			<TBUID>E4F54BFD-491F-2A28-43B8-F9A177C4D3E4</TBUID>
			<Version>16</Version>
			<PayloadFilter2ID>3015</PayloadFilter2ID>
			<Name>Error</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="374">
			<TBUID>515B9CB3-96A1-D651-B9A6-E970A1A4C218</TBUID>
			<Version>4</Version>
			<PayloadFilter2ID>3015</PayloadFilter2ID>
			<Name>basicAuthEnable</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="377">
			<TBUID>D4325A80-52A9-CF0B-BB84-6BF6D126DD9A</TBUID>
			<Version>12</Version>
			<PayloadFilter2ID>5736</PayloadFilter2ID>
			<Name>AllowedEXEs</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="378">
			<TBUID>5D99CD62-5A1D-A73E-5358-62506D1B2735</TBUID>
			<Version>1</Version>
			<PayloadFilter2ID>3043</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>secs</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="379">
			<TBUID>2B03FB92-EA6E-EE88-AD89-2EB90C1C6D7D</TBUID>
			<Version>1</Version>
			<PayloadFilter2ID>3043</PayloadFilter2ID>
			<Name>n</Name>
			<Value>86400</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="893">
			<TBUID>404AF61A-1231-5CC7-6F63-E7BCC8D0A76A</TBUID>
			<Version>3</Version>
			<PayloadFilter2ID>6333</PayloadFilter2ID>
			<Name>iVPDefaultOn</Name>
			<Value>yes</Value>
			<UserEditable>false</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="907">
			<TBUID>79A01285-0C00-783D-D8A0-BCE3C4D7F0A1</TBUID>
			<Version>2</Version>
			<PayloadFilter2ID>6347</PayloadFilter2ID>
			<Name>iVPDefaultOn</Name>
			<Value>yes</Value>
			<UserEditable>false</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="400">
			<TBUID>EF31DD47-5DCA-649F-270C-70627DEBBABB</TBUID>
			<Version>7</Version>
			<PayloadFilter2ID>3167</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>secs</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="401">
			<TBUID>22CD58FE-122A-693D-AB2F-301CCBC936C8</TBUID>
			<Version>7</Version>
			<PayloadFilter2ID>3167</PayloadFilter2ID>
			<Name>n</Name>
			<Value>1800</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="412">
			<TBUID>1317B688-E28B-B304-4678-69CD031DE5F4</TBUID>
			<Version>4</Version>
			<PayloadFilter2ID>3201</PayloadFilter2ID>
			<Name>resCount</Name>
			<Value>50</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="413">
			<TBUID>B8B71887-0C36-81F4-F6CD-CC4DA49A2A3C</TBUID>
			<Version>4</Version>
			<PayloadFilter2ID>3201</PayloadFilter2ID>
			<Name>mseconds</Name>
			<Value>5</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="416">
			<TBUID>6124C005-AAB8-E43C-32B9-439E5AF64B4C</TBUID>
			<Version>8</Version>
			<PayloadFilter2ID>3225</PayloadFilter2ID>
			<Name>ignorePorts</Name>
			<Value>443</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="417">
			<TBUID>E243AEE7-57F0-D6FF-13DC-884489A04BCE</TBUID>
			<Version>8</Version>
			<PayloadFilter2ID>3225</PayloadFilter2ID>
			<Name>rangetype</Name>
			<Value>all</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="418">
			<TBUID>19DBC7CC-FE5D-1461-654C-FC1769A53E30</TBUID>
			<Version>9</Version>
			<PayloadFilter2ID>3225</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>secs</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="419">
			<TBUID>E0FB8325-429A-E37C-0DD1-658A7859318F</TBUID>
			<Version>9</Version>
			<PayloadFilter2ID>3225</PayloadFilter2ID>
			<Name>n</Name>
			<Value>1800</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="425">
			<TBUID>240E0B36-F555-38DF-8A6B-B4B638389F99</TBUID>
			<Version>10</Version>
			<PayloadFilter2ID>3271</PayloadFilter2ID>
			<Name>TimeSeconds</Name>
			<Value>86400</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="428">
			<TBUID>26D9F8A2-0F8E-A5FC-66FE-5FCBB8729D9D</TBUID>
			<Version>4</Version>
			<PayloadFilter2ID>3312</PayloadFilter2ID>
			<Name>resCount</Name>
			<Value>20</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="429">
			<TBUID>327D6FAE-C058-D06E-885C-7821D276DC2A</TBUID>
			<Version>4</Version>
			<PayloadFilter2ID>3312</PayloadFilter2ID>
			<Name>mseconds</Name>
			<Value>10</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="953">
			<TBUID>CACACEF6-DB09-A040-D155-052FE3634DC0</TBUID>
			<Version>4</Version>
			<PayloadFilter2ID>6393</PayloadFilter2ID>
			<Name>iVPDefaultOn</Name>
			<Value>no</Value>
			<UserEditable>false</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="954">
			<TBUID>D6723CAD-472B-382E-671A-F8A66EC1A0EC</TBUID>
			<Version>4</Version>
			<PayloadFilter2ID>6394</PayloadFilter2ID>
			<Name>iVPDefaultOn</Name>
			<Value>no</Value>
			<UserEditable>false</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="957">
			<TBUID>3482A5C4-7548-EAA2-6635-52F39E6049C7</TBUID>
			<Version>3</Version>
			<PayloadFilter2ID>6397</PayloadFilter2ID>
			<Name>iVPDefaultOn</Name>
			<Value>no</Value>
			<UserEditable>false</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="958">
			<TBUID>ED32268B-2D5D-78BE-29D4-4C86ACC2D56E</TBUID>
			<Version>7</Version>
			<PayloadFilter2ID>6398</PayloadFilter2ID>
			<Name>iVPDefaultOn</Name>
			<Value>no</Value>
			<UserEditable>false</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="447">
			<TBUID>3491DD98-6E48-6408-5A13-B3924BCB6683</TBUID>
			<Version>25</Version>
			<PayloadFilter2ID>5032</PayloadFilter2ID>
			<Name>ignorePorts</Name>
			<Value>443</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="959">
			<TBUID>590E7B00-234F-2156-C0E6-00109877FCC3</TBUID>
			<Version>4</Version>
			<PayloadFilter2ID>6399</PayloadFilter2ID>
			<Name>iVPDefaultOn</Name>
			<Value>no</Value>
			<UserEditable>false</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="448">
			<TBUID>2C33F8D3-59C7-1C3E-B0C7-DCE77F301532</TBUID>
			<Version>25</Version>
			<PayloadFilter2ID>5032</PayloadFilter2ID>
			<Name>rangetype</Name>
			<Value>all</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="449">
			<TBUID>688C3976-8FE2-67E9-303F-65D27FF56897</TBUID>
			<Version>27</Version>
			<PayloadFilter2ID>5032</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>secs</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="961">
			<TBUID>B30BD19E-6D99-64A8-9988-7B57F1179602</TBUID>
			<Version>2</Version>
			<PayloadFilter2ID>6424</PayloadFilter2ID>
			<Name>resCount</Name>
			<Value>20</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="450">
			<TBUID>D5F9B768-1F3B-DD24-3B65-5C8CB48C6090</TBUID>
			<Version>27</Version>
			<PayloadFilter2ID>5032</PayloadFilter2ID>
			<Name>n</Name>
			<Value>86400</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="962">
			<TBUID>C036F452-4EA7-0A3E-10DC-38C032019126</TBUID>
			<Version>2</Version>
			<PayloadFilter2ID>6424</PayloadFilter2ID>
			<Name>mseconds</Name>
			<Value>10</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="451">
			<TBUID>DEC150CE-DD67-07AE-0364-3CDD6057D423</TBUID>
			<Version>4</Version>
			<PayloadFilter2ID>5032</PayloadFilter2ID>
			<Name>sslv3</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="452">
			<TBUID>BE853F6A-A9A9-E477-BEB2-74E8F62EEF73</TBUID>
			<Version>4</Version>
			<PayloadFilter2ID>5032</PayloadFilter2ID>
			<Name>tlsv1</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="453">
			<TBUID>239DE6CD-8D1C-4E90-38C9-29657DE8B6BA</TBUID>
			<Version>4</Version>
			<PayloadFilter2ID>5032</PayloadFilter2ID>
			<Name>tlsv2</Name>
			<Value>false</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="454">
			<TBUID>82B2C977-BE67-60D5-AB7A-21551FDB3FCD</TBUID>
			<Version>4</Version>
			<PayloadFilter2ID>5032</PayloadFilter2ID>
			<Name>tlsv3</Name>
			<Value>false</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="966">
			<TBUID>DEDEBCB0-1155-405D-006C-8E57576C194C</TBUID>
			<Version>5</Version>
			<PayloadFilter2ID>6440</PayloadFilter2ID>
			<Name>iVPDefaultOn</Name>
			<Value>no</Value>
			<UserEditable>false</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="455">
			<TBUID>89B0B797-AD19-DB3D-3D68-286AE3BF2929</TBUID>
			<Version>4</Version>
			<PayloadFilter2ID>5032</PayloadFilter2ID>
			<Name>rangetype1</Name>
			<Value>log</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="456">
			<TBUID>AEA89840-DCE1-D1E0-CDDD-D3D358B68C9B</TBUID>
			<Version>2</Version>
			<PayloadFilter2ID>5032</PayloadFilter2ID>
			<Name>sslv2</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="970">
			<TBUID>76B265EC-BF47-B2A9-C1B2-0A767F9559E6</TBUID>
			<Version>2</Version>
			<PayloadFilter2ID>7007</PayloadFilter2ID>
			<Name>MITREAttackTactic</Name>
			<Value>TA0008,TA0011</Value>
			<UserEditable>false</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="971">
			<TBUID>D909A729-47E3-4D9E-EDDD-92E9895F7303</TBUID>
			<Version>1</Version>
			<PayloadFilter2ID>6294</PayloadFilter2ID>
			<Name>MITREAttackTactic</Name>
			<Value>TA0002,TA0003,TA0004</Value>
			<UserEditable>false</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="460">
			<TBUID>49C2A187-D037-E376-E14C-0264E1BFE0EC</TBUID>
			<Version>13</Version>
			<PayloadFilter2ID>4990</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>secs</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="972">
			<TBUID>945E3FAD-8B9F-6AA7-A551-5BA760998066</TBUID>
			<Version>1</Version>
			<PayloadFilter2ID>6293</PayloadFilter2ID>
			<Name>MITREAttackTactic</Name>
			<Value>TA0002,TA0003,TA0004</Value>
			<UserEditable>false</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="461">
			<TBUID>BF455108-5573-A986-0CED-0646AC4F24D8</TBUID>
			<Version>13</Version>
			<PayloadFilter2ID>4990</PayloadFilter2ID>
			<Name>n</Name>
			<Value>1800</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="973">
			<TBUID>D7A08FE1-1DF3-8374-0203-D312DC0CD0E4</TBUID>
			<Version>1</Version>
			<PayloadFilter2ID>5330</PayloadFilter2ID>
			<Name>MITREAttackTactic</Name>
			<Value>TA0002</Value>
			<UserEditable>false</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="462">
			<TBUID>0E43BE94-64A6-0FD8-14F1-6EB152E6C023</TBUID>
			<Version>12</Version>
			<PayloadFilter2ID>4990</PayloadFilter2ID>
			<Name>ignorePorts</Name>
			<Value>3389</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="974">
			<TBUID>D8F86E38-4007-E59C-A5C2-F819F23087A2</TBUID>
			<Version>3</Version>
			<PayloadFilter2ID>6561</PayloadFilter2ID>
			<Name>iVPDefaultOn</Name>
			<Value>no</Value>
			<UserEditable>false</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="463">
			<TBUID>58189465-94FF-16FB-30FF-AAB53C009EC1</TBUID>
			<Version>12</Version>
			<PayloadFilter2ID>4990</PayloadFilter2ID>
			<Name>rangetype</Name>
			<Value>all</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="975">
			<TBUID>2BC97A7D-C0C2-4A3D-3CE0-A491058EF57B</TBUID>
			<Version>2</Version>
			<PayloadFilter2ID>6561</PayloadFilter2ID>
			<Name>MITREAttackTactic</Name>
			<Value>TA0003,TA0004</Value>
			<UserEditable>false</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="466">
			<TBUID>DEB72B8F-DEFA-8324-64B4-341B8D0CC7F8</TBUID>
			<Version>7</Version>
			<PayloadFilter2ID>3614</PayloadFilter2ID>
			<Name>ignorePorts</Name>
			<Value>443</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="467">
			<TBUID>36A5B41F-8984-633E-9107-9F00889E2A21</TBUID>
			<Version>7</Version>
			<PayloadFilter2ID>3614</PayloadFilter2ID>
			<Name>rangetype</Name>
			<Value>all</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="468">
			<TBUID>EF4F03E8-5836-B72B-2FE4-D5E2184D2B5B</TBUID>
			<Version>7</Version>
			<PayloadFilter2ID>3614</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>secs</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="980">
			<TBUID>A2ED63CA-15BC-56CC-910E-0DFAD42A759C</TBUID>
			<Version>2</Version>
			<PayloadFilter2ID>6838</PayloadFilter2ID>
			<Name>MITREAttackTactic</Name>
			<Value>TA0008,TA0011</Value>
			<UserEditable>false</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="469">
			<TBUID>9A475903-FA58-D793-86B3-06D4C2EC1D59</TBUID>
			<Version>7</Version>
			<PayloadFilter2ID>3614</PayloadFilter2ID>
			<Name>n</Name>
			<Value>86400</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="981">
			<TBUID>88830AA4-74BF-2B69-5638-34353434EDE8</TBUID>
			<Version>1</Version>
			<PayloadFilter2ID>6838</PayloadFilter2ID>
			<Name>MITREAttackTacticOld</Name>
			<Value></Value>
			<UserEditable>false</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="470">
			<TBUID>F2EF99F2-63E9-7747-A849-474679B029B2</TBUID>
			<Version>2</Version>
			<PayloadFilter2ID>3614</PayloadFilter2ID>
			<Name>sslv3</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="982">
			<TBUID>756C2867-CEB1-A91D-69CF-3C4144D6AAB4</TBUID>
			<Version>2</Version>
			<PayloadFilter2ID>6295</PayloadFilter2ID>
			<Name>MITREAttackTactic</Name>
			<Value>TA0002,TA0003,TA0004</Value>
			<UserEditable>false</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="471">
			<TBUID>55D2333C-C5B2-ECBF-3E45-ECDBAE646190</TBUID>
			<Version>2</Version>
			<PayloadFilter2ID>3614</PayloadFilter2ID>
			<Name>tlsv0</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="983">
			<TBUID>92CD291E-3B03-8D2E-52B7-EF891F2D6BFD</TBUID>
			<Version>1</Version>
			<PayloadFilter2ID>6295</PayloadFilter2ID>
			<Name>MITREAttackTacticOld</Name>
			<Value></Value>
			<UserEditable>false</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="472">
			<TBUID>02572E33-7985-06FD-F74B-9259EA349D96</TBUID>
			<Version>2</Version>
			<PayloadFilter2ID>3614</PayloadFilter2ID>
			<Name>tlsv1</Name>
			<Value>false</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="984">
			<TBUID>EC43D695-0C9F-B813-900D-1FA379342F19</TBUID>
			<Version>2</Version>
			<PayloadFilter2ID>5032</PayloadFilter2ID>
			<Name>MITREAttackTactic</Name>
			<Value>TA0011</Value>
			<UserEditable>false</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="473">
			<TBUID>EFD23105-6E4E-9931-6D6E-550E48B19901</TBUID>
			<Version>2</Version>
			<PayloadFilter2ID>3614</PayloadFilter2ID>
			<Name>tlsv2</Name>
			<Value>false</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="474">
			<TBUID>B16F114C-953A-39C9-2897-DD149725BDD8</TBUID>
			<Version>5</Version>
			<PayloadFilter2ID>4998</PayloadFilter2ID>
			<Name>logtype</Name>
			<Value>secs</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="986">
			<TBUID>0C4F4177-343B-46C1-7F3C-758576AFE52B</TBUID>
			<Version>1</Version>
			<PayloadFilter2ID>6864</PayloadFilter2ID>
			<Name>MITREAttackTactic</Name>
			<Value>TA0011</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="475">
			<TBUID>93A1C5A4-0587-7DF1-1B27-7789B163CBD2</TBUID>
			<Version>5</Version>
			<PayloadFilter2ID>4998</PayloadFilter2ID>
			<Name>n</Name>
			<Value>86400</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="987">
			<TBUID>82D173C2-F42C-A112-5706-C8CB025620DC</TBUID>
			<Version>1</Version>
			<PayloadFilter2ID>6865</PayloadFilter2ID>
			<Name>MITREAttackTactic</Name>
			<Value>TA0011</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="476">
			<TBUID>09968DAD-9D9D-4DA5-F7E9-3383B207684C</TBUID>
			<Version>5</Version>
			<PayloadFilter2ID>4998</PayloadFilter2ID>
			<Name>ignorePorts</Name>
			<Value>1</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="988">
			<TBUID>F95C9195-3CBB-A7C6-6F63-0A33B9FA325C</TBUID>
			<Version>1</Version>
			<PayloadFilter2ID>6866</PayloadFilter2ID>
			<Name>MITREAttackTactic</Name>
			<Value>TA0011</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="477">
			<TBUID>BD280489-D3B1-2D8A-D165-0C778A96C780</TBUID>
			<Version>5</Version>
			<PayloadFilter2ID>4998</PayloadFilter2ID>
			<Name>rangetype</Name>
			<Value>all</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="991">
			<TBUID>B191A65F-CAFB-49E3-0379-43EBF77C7C7F</TBUID>
			<Version>2</Version>
			<PayloadFilter2ID>6902</PayloadFilter2ID>
			<Name>MITREAttackTactic</Name>
			<Value>TA0011</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="992">
			<TBUID>4CBBE2CE-30A4-A472-C7B9-8A4F9D844457</TBUID>
			<Version>1</Version>
			<PayloadFilter2ID>6903</PayloadFilter2ID>
			<Name>MITREAttackTactic</Name>
			<Value>TA0011</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="993">
			<TBUID>75749BC2-AECA-91ED-AC70-AA5BB79CAFEE</TBUID>
			<Version>2</Version>
			<PayloadFilter2ID>7018</PayloadFilter2ID>
			<Name>MITREAttackTactic</Name>
			<Value>TA0011</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="995">
			<TBUID>2A630051-D0B7-FF70-ABDA-AADC1FB59541</TBUID>
			<Version>6</Version>
			<PayloadFilter2ID>7008</PayloadFilter2ID>
			<Name>MITREAttackTactic</Name>
			<Value>TA0003,TA0004,TA0008,TA0011</Value>
			<UserEditable>false</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="996">
			<TBUID>A20FA9C8-6FFC-C1D5-AF37-C5C7117181B1</TBUID>
			<Version>2</Version>
			<PayloadFilter2ID>6962</PayloadFilter2ID>
			<Name>MITREAttackTactic</Name>
			<Value>TA0011</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="997">
			<TBUID>93202C4E-0BA7-98BC-4BC1-B8D9B6AC3208</TBUID>
			<Version>2</Version>
			<PayloadFilter2ID>7001</PayloadFilter2ID>
			<Name>MITREAttackTactic</Name>
			<Value>TA0002, TA0008</Value>
			<UserEditable>false</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="998">
			<TBUID>870DBA92-6D46-F2EF-E007-742FC3E0A5F3</TBUID>
			<Version>3</Version>
			<PayloadFilter2ID>7002</PayloadFilter2ID>
			<Name>MITREAttackTactic</Name>
			<Value>TA0006</Value>
			<UserEditable>false</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="999">
			<TBUID>99FEE667-4255-BCEB-C9E6-A330C62DC0F7</TBUID>
			<Version>2</Version>
			<PayloadFilter2ID>7003</PayloadFilter2ID>
			<Name>MITREAttackTactic</Name>
			<Value>TA0002</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="1000">
			<TBUID>C3CB9B4E-9F47-F541-69CE-F99FD961DE60</TBUID>
			<Version>3</Version>
			<PayloadFilter2ID>7004</PayloadFilter2ID>
			<Name>MITREAttackTactic</Name>
			<Value>TA0007</Value>
			<UserEditable>false</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="1001">
			<TBUID>BF33D316-771A-2C92-48DB-90B11C67BA5C</TBUID>
			<Version>2</Version>
			<PayloadFilter2ID>7005</PayloadFilter2ID>
			<Name>MITREAttackTactic</Name>
			<Value>TA0008</Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="1002">
			<TBUID>172A5F55-300E-C0CD-9E25-499DE7493EF9</TBUID>
			<Version>3</Version>
			<PayloadFilter2ID>7006</PayloadFilter2ID>
			<Name>MITREAttackTactic</Name>
			<Value>TA0002</Value>
			<UserEditable>false</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="1003">
			<TBUID>9FC35EE6-B659-3CB4-21E2-A95D131B3D0C</TBUID>
			<Version>1</Version>
			<PayloadFilter2ID>7006</PayloadFilter2ID>
			<Name>iVPDefaultOn</Name>
			<Value>Informational</Value>
			<UserEditable>false</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="1004">
			<TBUID>B0B3F8A4-EDBC-C506-9ADD-59053F337B8B</TBUID>
			<Version>3</Version>
			<PayloadFilter2ID>7009</PayloadFilter2ID>
			<Name>MITREAttackTactic</Name>
			<Value>TA0009</Value>
			<UserEditable>false</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="1005">
			<TBUID>6ED3A5C5-313E-BFD1-3016-D0CABB51EF68</TBUID>
			<Version>2</Version>
			<PayloadFilter2ID>7009</PayloadFilter2ID>
			<Name>MITREAttackTacticOld</Name>
			<Value></Value>
			<UserEditable>false</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="1006">
			<TBUID>90AAC481-BB2C-BEA7-85BE-C3778D05E716</TBUID>
			<Version>1</Version>
			<PayloadFilter2ID>7009</PayloadFilter2ID>
			<Name>iVPDefaultOn</Name>
			<Value>Informational</Value>
			<UserEditable>false</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="1007">
			<TBUID>A7F67059-0943-2B4B-B33C-DE74CCC2602F</TBUID>
			<Version>3</Version>
			<PayloadFilter2ID>5725</PayloadFilter2ID>
			<Name>MITREAttackTactic</Name>
			<Value>TA0008</Value>
			<UserEditable>false</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="1008">
			<TBUID>A801C35A-0C28-14A1-D5E5-B8F83DB3A808</TBUID>
			<Version>2</Version>
			<PayloadFilter2ID>5725</PayloadFilter2ID>
			<Name>MITREAttackTacticOld</Name>
			<Value></Value>
			<UserEditable>false</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="1009">
			<TBUID>78C26A32-76F2-7784-81EA-07EE411EECD7</TBUID>
			<Version>1</Version>
			<PayloadFilter2ID>5725</PayloadFilter2ID>
			<Name>iVPDefaultOn</Name>
			<Value>Informational</Value>
			<UserEditable>false</UserEditable>
		</PayloadFilter2Metadata>
		<PayloadFilter2Metadata doNotMerge="true" id="1014">
			<TBUID>42BB22E7-FBFD-6610-D83D-09C91045DA4E</TBUID>
			<Version>1</Version>
			<PayloadFilter2ID>7070</PayloadFilter2ID>
			<Name>AllowedIP</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</PayloadFilter2Metadata>
	</PayloadFilter2Metadatas>
	<PayloadFilter2MetadataOverrides>
		<PayloadFilter2MetadataOverride id="1">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>470</PayloadFilter2MetadataID>
			<Value>true</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="2">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>471</PayloadFilter2MetadataID>
			<Value>true</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="3">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>472</PayloadFilter2MetadataID>
			<Value>true</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="4">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>473</PayloadFilter2MetadataID>
			<Value>true</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="5">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>401</PayloadFilter2MetadataID>
			<Value>120</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="6">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>400</PayloadFilter2MetadataID>
			<Value>secs</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="7">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>419</PayloadFilter2MetadataID>
			<Value>120</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="8">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>418</PayloadFilter2MetadataID>
			<Value>secs</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="9">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>425</PayloadFilter2MetadataID>
			<Value>120</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="10">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>362</PayloadFilter2MetadataID>
			<Value>all</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="11">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>361</PayloadFilter2MetadataID>
			<Value>5222</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="12">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>360</PayloadFilter2MetadataID>
			<Value>120</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="13">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>359</PayloadFilter2MetadataID>
			<Value>secs</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="14">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>150</PayloadFilter2MetadataID>
			<Value>120</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="15">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>149</PayloadFilter2MetadataID>
			<Value>secs</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="16">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>620</PayloadFilter2MetadataID>
			<Value>120</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="17">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>619</PayloadFilter2MetadataID>
			<Value>secs</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="18">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>549</PayloadFilter2MetadataID>
			<Value>120</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="19">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>548</PayloadFilter2MetadataID>
			<Value>secs</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="20">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>551</PayloadFilter2MetadataID>
			<Value>120</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="21">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>550</PayloadFilter2MetadataID>
			<Value>secs</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="22">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>466</PayloadFilter2MetadataID>
			<Value>443</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="23">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>467</PayloadFilter2MetadataID>
			<Value>all</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="24">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>468</PayloadFilter2MetadataID>
			<Value>secs</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="25">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>469</PayloadFilter2MetadataID>
			<Value>120</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="26">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>308</PayloadFilter2MetadataID>
			<Value>secs</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="27">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>309</PayloadFilter2MetadataID>
			<Value>120</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="28">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>310</PayloadFilter2MetadataID>
			<Value>21</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="29">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>311</PayloadFilter2MetadataID>
			<Value>all</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="30">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>474</PayloadFilter2MetadataID>
			<Value>secs</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="31">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>475</PayloadFilter2MetadataID>
			<Value>120</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="32">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>183</PayloadFilter2MetadataID>
			<Value>secs</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="33">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>184</PayloadFilter2MetadataID>
			<Value>120</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="34">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>272</PayloadFilter2MetadataID>
			<Value>secs</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="35">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>273</PayloadFilter2MetadataID>
			<Value>120</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="36">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>274</PayloadFilter2MetadataID>
			<Value>8000</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="37">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>275</PayloadFilter2MetadataID>
			<Value>all</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="38">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>179</PayloadFilter2MetadataID>
			<Value>secs</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="39">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>180</PayloadFilter2MetadataID>
			<Value>120</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="40">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>181</PayloadFilter2MetadataID>
			<Value>2425</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="41">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>182</PayloadFilter2MetadataID>
			<Value>all</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="42">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>128</PayloadFilter2MetadataID>
			<Value>secs</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="43">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>129</PayloadFilter2MetadataID>
			<Value>120</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="44">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>132</PayloadFilter2MetadataID>
			<Value>secs</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="45">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>133</PayloadFilter2MetadataID>
			<Value>120</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="46">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>625</PayloadFilter2MetadataID>
			<Value>secs</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="47">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>626</PayloadFilter2MetadataID>
			<Value>120</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="48">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>641</PayloadFilter2MetadataID>
			<Value>secs</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="49">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>642</PayloadFilter2MetadataID>
			<Value>120</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="50">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>643</PayloadFilter2MetadataID>
			<Value>5190</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="51">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>644</PayloadFilter2MetadataID>
			<Value>all</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="52">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>727</PayloadFilter2MetadataID>
			<Value>secs</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="53">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>728</PayloadFilter2MetadataID>
			<Value>120</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="54">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>729</PayloadFilter2MetadataID>
			<Value>80,8080</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="55">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>730</PayloadFilter2MetadataID>
			<Value>all</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="56">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>64</PayloadFilter2MetadataID>
			<Value>25</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="57">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>65</PayloadFilter2MetadataID>
			<Value>all</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="58">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>66</PayloadFilter2MetadataID>
			<Value>secs</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="59">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>67</PayloadFilter2MetadataID>
			<Value>120</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="60">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>447</PayloadFilter2MetadataID>
			<Value>443</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="61">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>449</PayloadFilter2MetadataID>
			<Value>secs</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="62">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>450</PayloadFilter2MetadataID>
			<Value>120</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="63">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>451</PayloadFilter2MetadataID>
			<Value>true</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="64">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>452</PayloadFilter2MetadataID>
			<Value>true</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="65">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>453</PayloadFilter2MetadataID>
			<Value>true</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="66">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>454</PayloadFilter2MetadataID>
			<Value>true</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="67">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>455</PayloadFilter2MetadataID>
			<Value>all</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="68">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>456</PayloadFilter2MetadataID>
			<Value>true</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="69">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>207</PayloadFilter2MetadataID>
			<Value>secs</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="70">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>208</PayloadFilter2MetadataID>
			<Value>120</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="71">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>234</PayloadFilter2MetadataID>
			<Value>443</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="72">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>235</PayloadFilter2MetadataID>
			<Value>all</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="73">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>236</PayloadFilter2MetadataID>
			<Value>secs</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="74">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>237</PayloadFilter2MetadataID>
			<Value>120</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="75">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>738</PayloadFilter2MetadataID>
			<Value>secs</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="76">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>739</PayloadFilter2MetadataID>
			<Value>120</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="77">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>740</PayloadFilter2MetadataID>
			<Value></Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="78">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>230</PayloadFilter2MetadataID>
			<Value>443</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="79">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>231</PayloadFilter2MetadataID>
			<Value>all</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="80">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>232</PayloadFilter2MetadataID>
			<Value>secs</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="81">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>233</PayloadFilter2MetadataID>
			<Value>120</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="82">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>30</PayloadFilter2MetadataID>
			<Value>513</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="83">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>31</PayloadFilter2MetadataID>
			<Value>all</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="84">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>32</PayloadFilter2MetadataID>
			<Value>secs</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="85">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>33</PayloadFilter2MetadataID>
			<Value>120</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="86">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>48</PayloadFilter2MetadataID>
			<Value>secs</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="87">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>49</PayloadFilter2MetadataID>
			<Value>120</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="88">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>50</PayloadFilter2MetadataID>
			<Value>23</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="89">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>51</PayloadFilter2MetadataID>
			<Value>all</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="90">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>191</PayloadFilter2MetadataID>
			<Value>secs</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="91">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>192</PayloadFilter2MetadataID>
			<Value>120</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="92">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>193</PayloadFilter2MetadataID>
			<Value>22</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="93">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>194</PayloadFilter2MetadataID>
			<Value>all</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="94">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>460</PayloadFilter2MetadataID>
			<Value>secs</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="95">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>461</PayloadFilter2MetadataID>
			<Value>120</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="96">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>462</PayloadFilter2MetadataID>
			<Value>3389</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="97">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>463</PayloadFilter2MetadataID>
			<Value>all</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="98">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>238</PayloadFilter2MetadataID>
			<Value>secs</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="99">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>239</PayloadFilter2MetadataID>
			<Value>120</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="100">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>240</PayloadFilter2MetadataID>
			<Value>5900</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="101">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>241</PayloadFilter2MetadataID>
			<Value>all</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="102">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>68</PayloadFilter2MetadataID>
			<Value>secs</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="103">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>69</PayloadFilter2MetadataID>
			<Value>120</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="104">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>70</PayloadFilter2MetadataID>
			<Value>4899</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="105">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>71</PayloadFilter2MetadataID>
			<Value>all</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="106">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>72</PayloadFilter2MetadataID>
			<Value>secs</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="107">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>73</PayloadFilter2MetadataID>
			<Value>120</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="108">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>74</PayloadFilter2MetadataID>
			<Value>22</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="109">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>75</PayloadFilter2MetadataID>
			<Value>all</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="110">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>355</PayloadFilter2MetadataID>
			<Value>secs</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="111">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>356</PayloadFilter2MetadataID>
			<Value>120</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="112">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>357</PayloadFilter2MetadataID>
			<Value>23</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="113">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>358</PayloadFilter2MetadataID>
			<Value>all</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="114">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>604</PayloadFilter2MetadataID>
			<Value>5900</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="115">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>605</PayloadFilter2MetadataID>
			<Value>all</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="116">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>606</PayloadFilter2MetadataID>
			<Value>secs</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="117">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>607</PayloadFilter2MetadataID>
			<Value>120</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="118">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>98</PayloadFilter2MetadataID>
			<Value>6000</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="119">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>99</PayloadFilter2MetadataID>
			<Value>all</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="120">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>100</PayloadFilter2MetadataID>
			<Value>secs</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="121">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>101</PayloadFilter2MetadataID>
			<Value>120</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="122">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>741</PayloadFilter2MetadataID>
			<Value>secs</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="123">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>742</PayloadFilter2MetadataID>
			<Value>120</Value>
		</PayloadFilter2MetadataOverride>
		<PayloadFilter2MetadataOverride id="124">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<PayloadFilter2MetadataID>743</PayloadFilter2MetadataID>
			<Value></Value>
		</PayloadFilter2MetadataOverride>
	</PayloadFilter2MetadataOverrides>
	<ConnectionTypes>
		<ConnectionType doNotMerge="true" id="320">
			<TBUID>614C0780-972E-8DA5-483B-158D935D1869</TBUID>
			<Name>File Sharing Applications</Name>
			<Description></Description>
			<Direction>2</Direction>
			<Protocol>4358</Protocol>
			<PortType>1</PortType>
			<Ports>1-65535</Ports>
			<PortListID isNull="true"/>
			<IcmpType1>8</IcmpType1>
			<IcmpType2>0</IcmpType2>
			<Version>41</Version>
			<Type>2</Type>
			<UserEdited>false</UserEdited>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Category></Category>
			<MinimumAgentVersion>5.0.0.0</MinimumAgentVersion>
			<RecommendationsMode>-1</RecommendationsMode>
		</ConnectionType>
		<ConnectionType doNotMerge="true" id="257">
			<TBUID>111BE9DB-B83F-4219-130C-D4D321F2DDE8</TBUID>
			<Name>OpenSSL Client</Name>
			<Description></Description>
			<Direction>2</Direction>
			<Protocol>4358</Protocol>
			<PortType>1</PortType>
			<Ports>4433,666,443</Ports>
			<PortListID isNull="true"/>
			<IcmpType1>8</IcmpType1>
			<IcmpType2>0</IcmpType2>
			<Version>6</Version>
			<Type>2</Type>
			<UserEdited>false</UserEdited>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Category></Category>
			<MinimumAgentVersion>5.0.0.0</MinimumAgentVersion>
			<RecommendationsMode>-1</RecommendationsMode>
		</ConnectionType>
		<ConnectionType doNotMerge="true" id="322">
			<TBUID>461E0DBF-C9B3-723A-E462-0046C2654B16</TBUID>
			<Name>Instant Messenger Applications</Name>
			<Description></Description>
			<Direction>2</Direction>
			<Protocol>4358</Protocol>
			<PortType>1</PortType>
			<Ports>1-65535</Ports>
			<PortListID isNull="true"/>
			<IcmpType1>8</IcmpType1>
			<IcmpType2>0</IcmpType2>
			<Version>12</Version>
			<Type>2</Type>
			<UserEdited>false</UserEdited>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Category></Category>
			<MinimumAgentVersion>5.0.0.0</MinimumAgentVersion>
			<RecommendationsMode>-1</RecommendationsMode>
		</ConnectionType>
		<ConnectionType doNotMerge="true" id="323">
			<TBUID>7239F5F1-9E91-68D5-7AF2-D6476B1A40D0</TBUID>
			<Name>Mail Client Applications</Name>
			<Description></Description>
			<Direction>2</Direction>
			<Protocol>6</Protocol>
			<PortType>1</PortType>
			<Ports>1-65535</Ports>
			<PortListID isNull="true"/>
			<IcmpType1>8</IcmpType1>
			<IcmpType2>0</IcmpType2>
			<Version>7</Version>
			<Type>2</Type>
			<UserEdited>false</UserEdited>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Category></Category>
			<MinimumAgentVersion>5.0.0.0</MinimumAgentVersion>
			<RecommendationsMode>-1</RecommendationsMode>
		</ConnectionType>
		<ConnectionType doNotMerge="true" id="325">
			<TBUID>E85096D2-5080-B0A0-90D4-8975573D55F6</TBUID>
			<Name>Remote Login Applications</Name>
			<Description></Description>
			<Direction>2</Direction>
			<Protocol>4358</Protocol>
			<PortType>1</PortType>
			<Ports>1-65535</Ports>
			<PortListID isNull="true"/>
			<IcmpType1>8</IcmpType1>
			<IcmpType2>0</IcmpType2>
			<Version>10</Version>
			<Type>2</Type>
			<UserEdited>false</UserEdited>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Category></Category>
			<MinimumAgentVersion>5.0.0.0</MinimumAgentVersion>
			<RecommendationsMode>-1</RecommendationsMode>
		</ConnectionType>
		<ConnectionType doNotMerge="true" id="326">
			<TBUID>9FCAF76E-C728-59D4-69C3-6BE0C2F90D99</TBUID>
			<Name>SSL Client Applications</Name>
			<Description></Description>
			<Direction>2</Direction>
			<Protocol>6</Protocol>
			<PortType>1</PortType>
			<Ports>1-65535</Ports>
			<PortListID isNull="true"/>
			<IcmpType1>8</IcmpType1>
			<IcmpType2>0</IcmpType2>
			<Version>6</Version>
			<Type>2</Type>
			<UserEdited>false</UserEdited>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Category></Category>
			<MinimumAgentVersion>5.0.0.3000</MinimumAgentVersion>
			<RecommendationsMode>-1</RecommendationsMode>
		</ConnectionType>
		<ConnectionType doNotMerge="true" id="263">
			<TBUID>AF40DB70-5FFD-3C0B-227D-A65868777C6A</TBUID>
			<Name>Web Application Common</Name>
			<Description></Description>
			<Direction>1</Direction>
			<Protocol>6</Protocol>
			<PortType>1</PortType>
			<Ports>80,8080,8081,631</Ports>
			<PortListID isNull="true"/>
			<IcmpType1>8</IcmpType1>
			<IcmpType2>0</IcmpType2>
			<Version>20</Version>
			<Type>2</Type>
			<UserEdited>false</UserEdited>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Category></Category>
			<MinimumAgentVersion></MinimumAgentVersion>
			<RecommendationsMode>-1</RecommendationsMode>
		</ConnectionType>
		<ConnectionType doNotMerge="true" id="72">
			<TBUID>69941A19-6448-F73B-595F-23407E3ED763</TBUID>
			<Name>Unix Telnet</Name>
			<Description></Description>
			<Direction>1</Direction>
			<Protocol>6</Protocol>
			<PortType>3</PortType>
			<Ports></Ports>
			<PortListID>63</PortListID>
			<IcmpType1>8</IcmpType1>
			<IcmpType2>0</IcmpType2>
			<Version>4</Version>
			<Type>2</Type>
			<UserEdited>false</UserEdited>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Category></Category>
			<MinimumAgentVersion>5.0.0.3000</MinimumAgentVersion>
			<RecommendationsMode>1</RecommendationsMode>
		</ConnectionType>
		<ConnectionType doNotMerge="true" id="328">
			<TBUID>912B2F9F-B5D6-D00C-F496-5AE6D2105F7F</TBUID>
			<Name>Web Media Applications</Name>
			<Description></Description>
			<Direction>2</Direction>
			<Protocol>6</Protocol>
			<PortType>1</PortType>
			<Ports>1-65535</Ports>
			<PortListID isNull="true"/>
			<IcmpType1>8</IcmpType1>
			<IcmpType2>0</IcmpType2>
			<Version>9</Version>
			<Type>2</Type>
			<UserEdited>false</UserEdited>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Category></Category>
			<MinimumAgentVersion>5.0.0.0</MinimumAgentVersion>
			<RecommendationsMode>-1</RecommendationsMode>
		</ConnectionType>
		<ConnectionType doNotMerge="true" id="330">
			<TBUID>A6C56F87-3490-8B2D-5CC1-B1454B40E8E0</TBUID>
			<Name>Web Server HTTPS</Name>
			<Description>HTTPS Web Server</Description>
			<Direction>1</Direction>
			<Protocol>6</Protocol>
			<PortType>1</PortType>
			<Ports>80,8080,443</Ports>
			<PortListID isNull="true"/>
			<IcmpType1>8</IcmpType1>
			<IcmpType2>0</IcmpType2>
			<Version>16</Version>
			<Type>2</Type>
			<UserEdited>false</UserEdited>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Category></Category>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<RecommendationsMode>1</RecommendationsMode>
		</ConnectionType>
		<ConnectionType doNotMerge="true" id="270">
			<TBUID>81A88C59-050D-20FC-81CA-DE1B00A62A8E</TBUID>
			<Name>Web Client SSL</Name>
			<Description></Description>
			<Direction>2</Direction>
			<Protocol>6</Protocol>
			<PortType>1</PortType>
			<Ports>443</Ports>
			<PortListID isNull="true"/>
			<IcmpType1>8</IcmpType1>
			<IcmpType2>0</IcmpType2>
			<Version>6</Version>
			<Type>2</Type>
			<UserEdited>false</UserEdited>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Category></Category>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<RecommendationsMode>1</RecommendationsMode>
		</ConnectionType>
		<ConnectionType doNotMerge="true" id="271">
			<TBUID>A9F8F204-BB7C-51F0-32AE-65E24004A7AD</TBUID>
			<Name>Suspicious Client Application Activity</Name>
			<Description></Description>
			<Direction>2</Direction>
			<Protocol>4358</Protocol>
			<PortType>1</PortType>
			<Ports>1-65535</Ports>
			<PortListID isNull="true"/>
			<IcmpType1>8</IcmpType1>
			<IcmpType2>0</IcmpType2>
			<Version>5</Version>
			<Type>2</Type>
			<UserEdited>false</UserEdited>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Category></Category>
			<MinimumAgentVersion>5.0.0.3000</MinimumAgentVersion>
			<RecommendationsMode>-1</RecommendationsMode>
		</ConnectionType>
		<ConnectionType doNotMerge="true" id="211">
			<TBUID>9C81CEEB-D345-FB21-2C6E-C910B8F565E2</TBUID>
			<Name>Port Mapper FTP Client</Name>
			<Description></Description>
			<Direction>2</Direction>
			<Protocol>4358</Protocol>
			<PortType>1</PortType>
			<Ports>20,21</Ports>
			<PortListID isNull="true"/>
			<IcmpType1>8</IcmpType1>
			<IcmpType2>0</IcmpType2>
			<Version>1</Version>
			<Type>2</Type>
			<UserEdited>false</UserEdited>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Category></Category>
			<MinimumAgentVersion></MinimumAgentVersion>
			<RecommendationsMode>-1</RecommendationsMode>
		</ConnectionType>
		<ConnectionType doNotMerge="true" id="213">
			<TBUID>D086A783-2BE6-00FA-0525-395D537C7398</TBUID>
			<Name>Database Oracle</Name>
			<Description></Description>
			<Direction>1</Direction>
			<Protocol>6</Protocol>
			<PortType>3</PortType>
			<Ports></Ports>
			<PortListID>32</PortListID>
			<IcmpType1>8</IcmpType1>
			<IcmpType2>0</IcmpType2>
			<Version>21</Version>
			<Type>2</Type>
			<UserEdited>false</UserEdited>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Category></Category>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<RecommendationsMode>1</RecommendationsMode>
		</ConnectionType>
		<ConnectionType doNotMerge="true" id="215">
			<TBUID>ACD5393B-0436-0FBD-FAA7-00360181297D</TBUID>
			<Name>Database MySQL</Name>
			<Description>Server for MySQL Server</Description>
			<Direction>1</Direction>
			<Protocol>6</Protocol>
			<PortType>3</PortType>
			<Ports></Ports>
			<PortListID>31</PortListID>
			<IcmpType1>8</IcmpType1>
			<IcmpType2>0</IcmpType2>
			<Version>3</Version>
			<Type>2</Type>
			<UserEdited>false</UserEdited>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Category></Category>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<RecommendationsMode>1</RecommendationsMode>
		</ConnectionType>
		<ConnectionType doNotMerge="true" id="343">
			<TBUID>CB785F15-C5F6-1643-AAAE-6918888679FA</TBUID>
			<Name>DCERPC Services</Name>
			<Description>Remote procedure call (RPC) is a protocol that is used by the Windows and Linux (Samba) operating system. RPC provides an inter-process communication mechanism that allows a program that is running on one computer to seamlessly access services on another computer. The protocol itself is derived from the Open Software Foundation (OSF) RPC protocol.</Description>
			<Direction>1</Direction>
			<Protocol>4358</Protocol>
			<PortType>1</PortType>
			<Ports>139,138,445</Ports>
			<PortListID isNull="true"/>
			<IcmpType1>8</IcmpType1>
			<IcmpType2>0</IcmpType2>
			<Version>108</Version>
			<Type>2</Type>
			<UserEdited>false</UserEdited>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Category></Category>
			<MinimumAgentVersion>5.0.0.3000</MinimumAgentVersion>
			<RecommendationsMode>1</RecommendationsMode>
		</ConnectionType>
		<ConnectionType doNotMerge="true" id="280">
			<TBUID>908623FA-3114-7B31-50EC-A55EC8D8DE32</TBUID>
			<Name>Port Mapper FTP Server</Name>
			<Description></Description>
			<Direction>1</Direction>
			<Protocol>4358</Protocol>
			<PortType>1</PortType>
			<Ports>21,20</Ports>
			<PortListID isNull="true"/>
			<IcmpType1>8</IcmpType1>
			<IcmpType2>0</IcmpType2>
			<Version>3</Version>
			<Type>2</Type>
			<UserEdited>false</UserEdited>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Category></Category>
			<MinimumAgentVersion></MinimumAgentVersion>
			<RecommendationsMode>-1</RecommendationsMode>
		</ConnectionType>
		<ConnectionType doNotMerge="true" id="155">
			<TBUID>A88A50E2-10F6-70D9-ACFC-DF5F5FFEA824</TBUID>
			<Name>Windows Services RPC Server DCERPC</Name>
			<Description></Description>
			<Direction>1</Direction>
			<Protocol>6</Protocol>
			<PortType>1</PortType>
			<Ports>135</Ports>
			<PortListID isNull="true"/>
			<IcmpType1>8</IcmpType1>
			<IcmpType2>0</IcmpType2>
			<Version>15</Version>
			<Type>2</Type>
			<UserEdited>false</UserEdited>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Category></Category>
			<MinimumAgentVersion></MinimumAgentVersion>
			<RecommendationsMode>1</RecommendationsMode>
		</ConnectionType>
		<ConnectionType doNotMerge="true" id="285">
			<TBUID>5CE68786-3A65-DEA0-D33E-AA885729BC8C</TBUID>
			<Name>OpenSSL</Name>
			<Description></Description>
			<Direction>1</Direction>
			<Protocol>4358</Protocol>
			<PortType>1</PortType>
			<Ports>4433,666,443</Ports>
			<PortListID isNull="true"/>
			<IcmpType1>8</IcmpType1>
			<IcmpType2>0</IcmpType2>
			<Version>21</Version>
			<Type>2</Type>
			<UserEdited>false</UserEdited>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Category></Category>
			<MinimumAgentVersion>5.0.0.0</MinimumAgentVersion>
			<RecommendationsMode>1</RecommendationsMode>
		</ConnectionType>
		<ConnectionType doNotMerge="true" id="350">
			<TBUID>9B911922-63D7-911B-6200-820D6ECE944E</TBUID>
			<Name>Suspicious Server Application Activity</Name>
			<Description></Description>
			<Direction>1</Direction>
			<Protocol>4358</Protocol>
			<PortType>1</PortType>
			<Ports>1-65535</Ports>
			<PortListID isNull="true"/>
			<IcmpType1>8</IcmpType1>
			<IcmpType2>0</IcmpType2>
			<Version>35</Version>
			<Type>2</Type>
			<UserEdited>false</UserEdited>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Category></Category>
			<MinimumAgentVersion>5.0.0.3000</MinimumAgentVersion>
			<RecommendationsMode>-1</RecommendationsMode>
		</ConnectionType>
		<ConnectionType doNotMerge="true" id="290">
			<TBUID>1573DA33-90ED-027A-6EE4-C0FFE4A1F93C</TBUID>
			<Name>Web Client Common</Name>
			<Description></Description>
			<Direction>2</Direction>
			<Protocol>6</Protocol>
			<PortType>3</PortType>
			<Ports></Ports>
			<PortListID>46</PortListID>
			<IcmpType1>8</IcmpType1>
			<IcmpType2>0</IcmpType2>
			<Version>43</Version>
			<Type>2</Type>
			<UserEdited>false</UserEdited>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Category></Category>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<RecommendationsMode>1</RecommendationsMode>
		</ConnectionType>
		<ConnectionType doNotMerge="true" id="355">
			<TBUID>231BCCD8-E0EE-FFF7-00AD-3D35DA8371BC</TBUID>
			<Name>DCERPC Services - Client</Name>
			<Description></Description>
			<Direction>2</Direction>
			<Protocol>6</Protocol>
			<PortType>1</PortType>
			<Ports>139,445</Ports>
			<PortListID isNull="true"/>
			<IcmpType1>8</IcmpType1>
			<IcmpType2>0</IcmpType2>
			<Version>24</Version>
			<Type>2</Type>
			<UserEdited>false</UserEdited>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Category></Category>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<RecommendationsMode>1</RecommendationsMode>
		</ConnectionType>
		<ConnectionType doNotMerge="true" id="227">
			<TBUID>FCC29CC9-3A9E-3F2F-E8DF-763437848F94</TBUID>
			<Name>Mail Server Common</Name>
			<Description></Description>
			<Direction>1</Direction>
			<Protocol>6</Protocol>
			<PortType>1</PortType>
			<Ports>25,110,143</Ports>
			<PortListID isNull="true"/>
			<IcmpType1>8</IcmpType1>
			<IcmpType2>0</IcmpType2>
			<Version>7</Version>
			<Type>2</Type>
			<UserEdited>false</UserEdited>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Category></Category>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<RecommendationsMode>1</RecommendationsMode>
		</ConnectionType>
		<ConnectionType doNotMerge="true" id="361">
			<TBUID>0589503F-5BF6-07CB-27F4-4070670FA593</TBUID>
			<Name>Remote Desktop Protocol Server</Name>
			<Description></Description>
			<Direction>1</Direction>
			<Protocol>6</Protocol>
			<PortType>3</PortType>
			<Ports></Ports>
			<PortListID>1</PortListID>
			<IcmpType1>8</IcmpType1>
			<IcmpType2>0</IcmpType2>
			<Version>8</Version>
			<Type>2</Type>
			<UserEdited>false</UserEdited>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Category></Category>
			<MinimumAgentVersion></MinimumAgentVersion>
			<RecommendationsMode>1</RecommendationsMode>
		</ConnectionType>
		<ConnectionType doNotMerge="true" id="236">
			<TBUID>D29688F1-1BC6-71CB-5709-A1D2AE10C4EB</TBUID>
			<Name>FTP Server Common</Name>
			<Description>File Transfer Protocol</Description>
			<Direction>1</Direction>
			<Protocol>6</Protocol>
			<PortType>3</PortType>
			<Ports></Ports>
			<PortListID>6</PortListID>
			<IcmpType1>8</IcmpType1>
			<IcmpType2>0</IcmpType2>
			<Version>6</Version>
			<Type>2</Type>
			<UserEdited>false</UserEdited>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Category></Category>
			<MinimumAgentVersion>5.0.0.3000</MinimumAgentVersion>
			<RecommendationsMode>1</RecommendationsMode>
		</ConnectionType>
		<ConnectionType doNotMerge="true" id="110">
			<TBUID>5269090A-2036-766E-2E83-D89E032CD56B</TBUID>
			<Name>Port Mapper Windows</Name>
			<Description></Description>
			<Direction>1</Direction>
			<Protocol>4358</Protocol>
			<PortType>1</PortType>
			<Ports>135</Ports>
			<PortListID isNull="true"/>
			<IcmpType1>8</IcmpType1>
			<IcmpType2>0</IcmpType2>
			<Version>2</Version>
			<Type>2</Type>
			<UserEdited>false</UserEdited>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Category></Category>
			<MinimumAgentVersion></MinimumAgentVersion>
			<RecommendationsMode>-1</RecommendationsMode>
		</ConnectionType>
		<ConnectionType doNotMerge="true" id="303">
			<TBUID>6852716F-283C-F17C-7F5F-5230E5BF6BDB</TBUID>
			<Name>SSL/TLS Server</Name>
			<Description></Description>
			<Direction>1</Direction>
			<Protocol>6</Protocol>
			<PortType>3</PortType>
			<Ports></Ports>
			<PortListID>82</PortListID>
			<IcmpType1>8</IcmpType1>
			<IcmpType2>0</IcmpType2>
			<Version>7</Version>
			<Type>2</Type>
			<UserEdited>false</UserEdited>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Category></Category>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<RecommendationsMode>-1</RecommendationsMode>
		</ConnectionType>
		<ConnectionType doNotMerge="true" id="304">
			<TBUID>0CD538A7-3046-ADFA-9E37-238C129B99F3</TBUID>
			<Name>SSL Client</Name>
			<Description></Description>
			<Direction>2</Direction>
			<Protocol>4358</Protocol>
			<PortType>1</PortType>
			<Ports>443,4433,465,585,636,990,993</Ports>
			<PortListID isNull="true"/>
			<IcmpType1>8</IcmpType1>
			<IcmpType2>0</IcmpType2>
			<Version>4</Version>
			<Type>2</Type>
			<UserEdited>false</UserEdited>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Category></Category>
			<MinimumAgentVersion>5.0.0.0</MinimumAgentVersion>
			<RecommendationsMode>-1</RecommendationsMode>
		</ConnectionType>
		<ConnectionType doNotMerge="true" id="371">
			<TBUID>DE08DBCE-D31B-7035-42A9-4178C894F6E5</TBUID>
			<Name>Windows Remote Management</Name>
			<Description></Description>
			<Direction>1</Direction>
			<Protocol>6</Protocol>
			<PortType>1</PortType>
			<Ports>5985</Ports>
			<PortListID isNull="true"/>
			<IcmpType1>8</IcmpType1>
			<IcmpType2>0</IcmpType2>
			<Version>1</Version>
			<Type>2</Type>
			<UserEdited>false</UserEdited>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Category></Category>
			<MinimumAgentVersion></MinimumAgentVersion>
			<RecommendationsMode>-1</RecommendationsMode>
		</ConnectionType>
		<ConnectionType doNotMerge="true" id="308">
			<TBUID>D68B548E-99EA-3F90-BC2F-D9609E3F95A8</TBUID>
			<Name>Windows Services RPC Client DCERPC</Name>
			<Description></Description>
			<Direction>2</Direction>
			<Protocol>4358</Protocol>
			<PortType>1</PortType>
			<Ports>135</Ports>
			<PortListID isNull="true"/>
			<IcmpType1>8</IcmpType1>
			<IcmpType2>0</IcmpType2>
			<Version>2</Version>
			<Type>2</Type>
			<UserEdited>false</UserEdited>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Category></Category>
			<MinimumAgentVersion></MinimumAgentVersion>
			<RecommendationsMode>-1</RecommendationsMode>
		</ConnectionType>
		<ConnectionType doNotMerge="true" id="311">
			<TBUID>6AA9EA3B-36B2-EA17-4827-CAA8A8ABB6AF</TBUID>
			<Name>Web Server Common</Name>
			<Description>Smart and vulnerability facing filters common to all web servers.</Description>
			<Direction>1</Direction>
			<Protocol>6</Protocol>
			<PortType>3</PortType>
			<Ports></Ports>
			<PortListID>118</PortListID>
			<IcmpType1>8</IcmpType1>
			<IcmpType2>0</IcmpType2>
			<Version>67</Version>
			<Type>2</Type>
			<UserEdited>false</UserEdited>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Category></Category>
			<MinimumAgentVersion></MinimumAgentVersion>
			<RecommendationsMode>-1</RecommendationsMode>
		</ConnectionType>
		<ConnectionType doNotMerge="true" id="377">
			<TBUID>20577010-627A-BD30-57DA-729D9D200B9A</TBUID>
			<Name>Windows Remote Management Client</Name>
			<Description>Identify the usage of WinRM on client machine to detect the originating machine in case of using WinRM for lateral movement.</Description>
			<Direction>2</Direction>
			<Protocol>6</Protocol>
			<PortType>1</PortType>
			<Ports>5985</Ports>
			<PortListID isNull="true"/>
			<IcmpType1>8</IcmpType1>
			<IcmpType2>0</IcmpType2>
			<Version>2</Version>
			<Type>2</Type>
			<UserEdited>false</UserEdited>
			<RequiresTBUIDs></RequiresTBUIDs>
			<Category></Category>
			<MinimumAgentVersion></MinimumAgentVersion>
			<RecommendationsMode>-1</RecommendationsMode>
		</ConnectionType>
	</ConnectionTypes>
	<ConnectionTypeOverrides/>
	<ConnectionTypeMetadatas>
		<ConnectionTypeMetadata doNotMerge="true" id="16">
			<TBUID>1B91DE1B-97BD-C20E-30AD-CE35EED8F011</TBUID>
			<Version>11</Version>
			<ConnectionTypeID>322</ConnectionTypeID>
			<Name>kk</Name>
			<Value>true</Value>
			<UserEditable>false</UserEditable>
		</ConnectionTypeMetadata>
		<ConnectionTypeMetadata doNotMerge="true" id="17">
			<TBUID>54A1FBB7-D84D-E9D3-37DA-D2C11B6D327E</TBUID>
			<Version>103</Version>
			<ConnectionTypeID>343</ConnectionTypeID>
			<Name>decoderEnable</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</ConnectionTypeMetadata>
		<ConnectionTypeMetadata doNotMerge="true" id="18">
			<TBUID>7D67D195-E345-0386-61AB-3714B8CBEF9A</TBUID>
			<Version>77</Version>
			<ConnectionTypeID>343</ConnectionTypeID>
			<Name>useByteOrderLittleEndian</Name>
			<Value>true</Value>
			<UserEditable>false</UserEditable>
		</ConnectionTypeMetadata>
		<ConnectionTypeMetadata doNotMerge="true" id="19">
			<TBUID>1FB30292-A650-012F-5C60-5FD0BC74EC5A</TBUID>
			<Version>77</Version>
			<ConnectionTypeID>343</ConnectionTypeID>
			<Name>disableRawNamedPipe</Name>
			<Value>true</Value>
			<UserEditable>false</UserEditable>
		</ConnectionTypeMetadata>
		<ConnectionTypeMetadata doNotMerge="true" id="4">
			<TBUID>5FA90C75-5984-6DE2-07F2-80D946AA0E8F</TBUID>
			<Version>7</Version>
			<ConnectionTypeID>155</ConnectionTypeID>
			<Name>decoderEnable</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</ConnectionTypeMetadata>
		<ConnectionTypeMetadata doNotMerge="true" id="20">
			<TBUID>70D0E679-C435-9457-966F-D2FC2DB73AF2</TBUID>
			<Version>77</Version>
			<ConnectionTypeID>343</ConnectionTypeID>
			<Name>disableSmallDCEfrag</Name>
			<Value></Value>
			<UserEditable>false</UserEditable>
		</ConnectionTypeMetadata>
		<ConnectionTypeMetadata doNotMerge="true" id="21">
			<TBUID>074553F2-59A5-4047-2084-53EDE23B9EE5</TBUID>
			<Version>77</Version>
			<ConnectionTypeID>343</ConnectionTypeID>
			<Name>disableNonSMBData</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</ConnectionTypeMetadata>
		<ConnectionTypeMetadata doNotMerge="true" id="22">
			<TBUID>037927F6-744A-E4D0-6D26-5AB4157DE7ED</TBUID>
			<Version>13</Version>
			<ConnectionTypeID>355</ConnectionTypeID>
			<Name>decoderEnable</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</ConnectionTypeMetadata>
		<ConnectionTypeMetadata doNotMerge="true" id="8">
			<TBUID>DCF1BB7B-A079-4E43-694F-03359488E362</TBUID>
			<Version>17</Version>
			<ConnectionTypeID>213</ConnectionTypeID>
			<Name>decoderEnable</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</ConnectionTypeMetadata>
		<ConnectionTypeMetadata doNotMerge="true" id="10">
			<TBUID>0CBB6B86-6408-C3BA-0646-AA0DAABAA628</TBUID>
			<Version>20</Version>
			<ConnectionTypeID>290</ConnectionTypeID>
			<Name>scanlimit</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</ConnectionTypeMetadata>
		<ConnectionTypeMetadata doNotMerge="true" id="13">
			<TBUID>C2966B94-EE21-E84E-8A21-178BFE428E00</TBUID>
			<Version>60</Version>
			<ConnectionTypeID>311</ConnectionTypeID>
			<Name>decoderEnable</Name>
			<Value>DoNotUse use monitorWebResponses instead</Value>
			<UserEditable>true</UserEditable>
		</ConnectionTypeMetadata>
		<ConnectionTypeMetadata doNotMerge="true" id="14">
			<TBUID>22B19203-F29B-90EC-F098-9A1D993DDE83</TBUID>
			<Version>41</Version>
			<ConnectionTypeID>311</ConnectionTypeID>
			<Name>monitorWebResponses</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</ConnectionTypeMetadata>
	</ConnectionTypeMetadatas>
	<ConnectionTypeMetadataOverrides/>
	<SecurityProfilePacketFilters/>
	<SecurityProfilePacketFilterInterfaceTypes/>
	<SecurityProfileStatefulFilters/>
	<SecurityProfilePayloadFilter2s>
		<SecurityProfilePayloadFilter2 isBridge="true" id="512">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>5830</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="513">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>4998</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="514">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>1358</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="515">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>5015</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="516">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>6962</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="517">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>3271</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="518">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>5912</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="519">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>3610</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="520">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>5031</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="521">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>4203</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="522">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>5725</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="523">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>5014</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="524">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>2121</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="525">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>2881</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="526">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>3609</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="527">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>1307</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="528">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>5032</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="529">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>4983</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="530">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>4285</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="531">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>1309</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="532">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>3167</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="533">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>5644</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="534">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>4861</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="535">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>3201</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="536">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>4201</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="537">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>5507</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="538">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>4199</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="539">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>3357</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="540">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>2883</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="541">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>5826</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="542">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>6333</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="543">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>4977</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="544">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>4994</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="545">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>6196</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="546">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>6424</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="547">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>7008</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="548">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>3225</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="549">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>2640</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="550">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>5027</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="551">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>5257</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="552">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>4046</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="553">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>5272</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="554">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>3342</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="555">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>3105</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="556">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>6838</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="557">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>4292</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="558">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>7007</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="559">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>5509</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="560">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>3054</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="561">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>4189</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="562">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>4976</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="563">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>3015</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="564">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>4979</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="565">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>5013</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="566">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>1297</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="567">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>5665</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="568">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>3053</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="569">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>4996</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="570">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>4581</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="571">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>5736</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="572">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>2330</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="573">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>2880</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="574">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>5614</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="575">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>4290</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="576">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>6561</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="577">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>6440</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="578">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>2639</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="579">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>7009</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="580">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>1950</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="581">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>5064</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="582">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>5030</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="583">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>5047</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="584">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>4204</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="441">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>2467</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="442">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>3449</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="443">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>5870</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="444">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>4177</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="445">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>7004</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="446">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>2298</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="447">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>6293</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="448">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>5007</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="449">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>4990</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="450">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>6902</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="451">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>4042</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="452">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>3448</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="453">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>4160</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="454">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>7072</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="455">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>4379</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="456">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>7003</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="457">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>3312</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="458">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>2297</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="459">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>4043</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="460">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>4989</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="461">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>2331</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="462">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>6903</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="463">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>7071</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="464">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>4107</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="465">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>7006</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="466">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>6393</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="467">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>4192</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="468">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>3332</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="469">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>7073</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="470">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>5361</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="471">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>5782</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="472">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>7005</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="473">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>6866</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="474">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>6394</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="475">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>5008</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="476">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>4198</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="477">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>5781</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="478">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>6399</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="479">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>1252</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="480">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>3614</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="481">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>4037</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="482">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>6865</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="483">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>7001</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="484">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>4180</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="485">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>5162</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="486">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>4197</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="487">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>5213</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="488">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>6864</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="489">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>4985</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="490">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>5728</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="491">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>7002</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="492">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>6397</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="493">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>6295</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="494">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>2338</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="495">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>6485</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="496">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>7070</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="497">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>1220</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="498">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>5330</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="499">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>2923</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="500">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>6398</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="501">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>6347</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="502">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>7018</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="503">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>2337</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="504">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>6294</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="505">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>4041</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="506">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>6484</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="507">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>2458</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="508">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>3043</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="509">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>6226</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="510">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>5004</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
		<SecurityProfilePayloadFilter2 isBridge="true" id="511">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<PayloadFilter2ID>5486</PayloadFilter2ID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfilePayloadFilter2>
	</SecurityProfilePayloadFilter2s>
	<SecurityProfilePayloadFilter2InterfaceTypes/>
	<SecurityProfileConnectionTypes>
		<SecurityProfileConnectionType isBridge="true" id="88">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<ConnectionTypeID>304</ConnectionTypeID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfileConnectionType>
		<SecurityProfileConnectionType isBridge="true" id="89">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<ConnectionTypeID>211</ConnectionTypeID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfileConnectionType>
		<SecurityProfileConnectionType isBridge="true" id="90">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<ConnectionTypeID>325</ConnectionTypeID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfileConnectionType>
		<SecurityProfileConnectionType isBridge="true" id="91">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<ConnectionTypeID>215</ConnectionTypeID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfileConnectionType>
		<SecurityProfileConnectionType isBridge="true" id="92">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<ConnectionTypeID>355</ConnectionTypeID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfileConnectionType>
		<SecurityProfileConnectionType isBridge="true" id="93">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<ConnectionTypeID>270</ConnectionTypeID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfileConnectionType>
		<SecurityProfileConnectionType isBridge="true" id="94">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<ConnectionTypeID>330</ConnectionTypeID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfileConnectionType>
		<SecurityProfileConnectionType isBridge="true" id="95">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<ConnectionTypeID>257</ConnectionTypeID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfileConnectionType>
		<SecurityProfileConnectionType isBridge="true" id="96">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<ConnectionTypeID>308</ConnectionTypeID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfileConnectionType>
		<SecurityProfileConnectionType isBridge="true" id="97">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<ConnectionTypeID>322</ConnectionTypeID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfileConnectionType>
		<SecurityProfileConnectionType isBridge="true" id="98">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<ConnectionTypeID>271</ConnectionTypeID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfileConnectionType>
		<SecurityProfileConnectionType isBridge="true" id="99">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<ConnectionTypeID>326</ConnectionTypeID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfileConnectionType>
		<SecurityProfileConnectionType isBridge="true" id="100">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<ConnectionTypeID>72</ConnectionTypeID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfileConnectionType>
		<SecurityProfileConnectionType isBridge="true" id="101">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<ConnectionTypeID>343</ConnectionTypeID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfileConnectionType>
		<SecurityProfileConnectionType isBridge="true" id="102">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<ConnectionTypeID>155</ConnectionTypeID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfileConnectionType>
		<SecurityProfileConnectionType isBridge="true" id="103">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<ConnectionTypeID>227</ConnectionTypeID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfileConnectionType>
		<SecurityProfileConnectionType isBridge="true" id="104">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<ConnectionTypeID>361</ConnectionTypeID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfileConnectionType>
		<SecurityProfileConnectionType isBridge="true" id="105">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<ConnectionTypeID>236</ConnectionTypeID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfileConnectionType>
		<SecurityProfileConnectionType isBridge="true" id="106">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<ConnectionTypeID>285</ConnectionTypeID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfileConnectionType>
		<SecurityProfileConnectionType isBridge="true" id="107">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<ConnectionTypeID>323</ConnectionTypeID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfileConnectionType>
		<SecurityProfileConnectionType isBridge="true" id="108">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<ConnectionTypeID>213</ConnectionTypeID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfileConnectionType>
		<SecurityProfileConnectionType isBridge="true" id="109">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<ConnectionTypeID>263</ConnectionTypeID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfileConnectionType>
		<SecurityProfileConnectionType isBridge="true" id="110">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<ConnectionTypeID>303</ConnectionTypeID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfileConnectionType>
		<SecurityProfileConnectionType isBridge="true" id="111">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<ConnectionTypeID>371</ConnectionTypeID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfileConnectionType>
		<SecurityProfileConnectionType isBridge="true" id="112">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<ConnectionTypeID>328</ConnectionTypeID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfileConnectionType>
		<SecurityProfileConnectionType isBridge="true" id="113">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<ConnectionTypeID>311</ConnectionTypeID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfileConnectionType>
		<SecurityProfileConnectionType isBridge="true" id="114">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<ConnectionTypeID>350</ConnectionTypeID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfileConnectionType>
		<SecurityProfileConnectionType isBridge="true" id="115">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<ConnectionTypeID>290</ConnectionTypeID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfileConnectionType>
		<SecurityProfileConnectionType isBridge="true" id="116">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<ConnectionTypeID>320</ConnectionTypeID>
			<AllInterfaceTypes>true</AllInterfaceTypes>
		</SecurityProfileConnectionType>
	</SecurityProfileConnectionTypes>
	<SecurityProfileConnectionTypeInterfaceTypes/>
	<InterfaceTypes/>
	<IntegrityRules>
		<IntegrityRule doNotMerge="true" id="64">
			<TBUID>8EBC0B7E-DBE4-EAAC-E542-F35F2C8BF846</TBUID>
			<Name>TMTR-0017: Microsoft Windows - SAM Domain Account Users Modification Detected</Name>
			<Description>This generic rule is intended to alert when modification detected in SAM domain account users.

This rule is applicable to Windows platforms.</Description>
			<Severity>1</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="65">
			<TBUID>A0387FFF-873C-B049-A8D2-EEB99355E331</TBUID>
			<Name>TMTR-0002: Suspicious Files Detected In Operating System Directories</Name>
			<Description>This generic rule is intended to alert when highly suspicious malware specific file entity is created or modified.

This rule is applicable to Windows platforms.</Description>
			<Severity>3</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="1">
			<TBUID>B8DD5417-E533-A322-931C-1F06760E43C2</TBUID>
			<Name>Microsoft Windows - Attributes of a service modified (ATT&amp;CK T1050, T1036, T1031)</Name>
			<Description>This rule is intended to alert when attributes of certain services are modified through Windows Registry as well as all service&apos;s attributes changed through Service Configuration Console.

The rule also provides configuration options to ignore monitoring services and to select service attributes for monitoring.</Description>
			<Severity>2</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.2098</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="2">
			<TBUID>4255223A-631D-241C-8C11-7C49C8ED33D5</TBUID>
			<Name>Microsoft Windows - System .dll or .exe files modified (ATT&amp;CK T1013)</Name>
			<Description>This rule alerts when there is a change in file attributes Created, LastModified, Permissions, Owner, Group, Size and Contents of .dll or .exe files under %WINDIR%\system32 path. Also the rule provides configuration option to ignore files for monitoring and to select the file attributes to monitor.</Description>
			<Severity>3</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="66">
			<TBUID>0666E804-FA3F-250C-76AA-656D3C7DE247</TBUID>
			<Name>TMTR-0005: Suspicious Files Detected In Application Directories</Name>
			<Description>This generic rule is intended to alert when highly suspicious malware specific file entity is created or modified.

This rule is applicable to Windows platforms.</Description>
			<Severity>2</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="67">
			<TBUID>8D4D2F4E-04AA-9E61-13E5-4B21076D165B</TBUID>
			<Name>TMTR-0006: Suspicious Files Detected In Application Directories</Name>
			<Description>This generic rule is intended to alert when highly suspicious malware specific file entity is created or modified.

This rule is applicable to Windows platforms.</Description>
			<Severity>3</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="68">
			<TBUID>99FC360A-92C2-2003-1390-6790044C9D87</TBUID>
			<Name>TMTR-0007: Suspicious Files Detected In Application Directories</Name>
			<Description>This generic rule is intended to alert when highly suspicious malware specific file entity is created or modified.

This rule is applicable to Windows platforms.</Description>
			<Severity>3</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="69">
			<TBUID>CC3F77CB-A9B0-FED1-0357-1F4131A589FC</TBUID>
			<Name>TMTR-0009: Suspicious Files Detected In System Folder</Name>
			<Description>This generic rule is intended to alert when highly suspicious malware specific file entity is created or modified.

This rule is applicable to Windows platforms.</Description>
			<Severity>1</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="70">
			<TBUID>BA45EED2-A3BC-7FA9-6888-23ED27973794</TBUID>
			<Name>TMTR-0010: Suspicious Files Detected In System Folder</Name>
			<Description>This generic rule is intended to alert when highly suspicious malware specific file entity is created or modified.

This rule is applicable to Windows platforms.</Description>
			<Severity>1</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="71">
			<TBUID>10E83E3A-A9EB-A9BB-18B2-833217F1AB59</TBUID>
			<Name>TMTR-0011: Suspicious Files Detected In System Folder</Name>
			<Description>This generic rule is intended to alert when highly suspicious malware specific file entity is created or modified.

This rule is applicable to Windows platforms.</Description>
			<Severity>3</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="72">
			<TBUID>606E0F7C-1C5B-8D5A-C7A2-082496083D69</TBUID>
			<Name>TMTR-0012: Suspicious Files Detected In Temporary Directories</Name>
			<Description>This generic rule is intended to alert when highly suspicious malware specific file entity is created or modified.

This rule is applicable to Windows platforms.</Description>
			<Severity>1</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="73">
			<TBUID>CDBB34F1-FCE6-D531-63EC-467DF254CE78</TBUID>
			<Name>TMTR-0013: Suspicious Files Detected In Windows Folder</Name>
			<Description>This generic rule is intended to alert when highly suspicious malware specific file entity is created or modified.

This rule is applicable to Windows platforms.</Description>
			<Severity>1</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="74">
			<TBUID>DF38DF0C-0965-8D07-4426-D0EA1E4B5783</TBUID>
			<Name>TMTR-0014: Suspicious Service Detected</Name>
			<Description>This generic rule is intended to alert when highly suspicious malware specific service detected.

This rule is applicable to Windows platforms.</Description>
			<Severity>3</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="75">
			<TBUID>148F6C95-A70B-DF56-B820-FD12A5B96543</TBUID>
			<Name>TMTR-0001: Suspicious Files Detected In Operating System Directories</Name>
			<Description>This generic rule is intended to alert when highly suspicious malware specific file entity is created or modified.

This rule is applicable to Windows platforms.</Description>
			<Severity>3</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="76">
			<TBUID>DC8B8F56-B4C6-B99D-E06A-5F5FCEEC0B11</TBUID>
			<Name>TMTR-0008: Suspicious Directories Detected In Program Files Folder</Name>
			<Description>Monitoring Program files folder for suspicious directories creation with specific keyword string matching in name.

This rule is applicable to Windows platforms.</Description>
			<Severity>2</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="77">
			<TBUID>75952E3D-662C-9ED1-1B9A-A6F0751A1A45</TBUID>
			<Name>TMTR-0019: Suspicious Files Detected In System Drivers Directory</Name>
			<Description>This generic rule is intended to alert when highly suspicious malware specific file entity is created or modified.

This rule is applicable to Windows platforms.</Description>
			<Severity>2</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="78">
			<TBUID>265B8A82-E922-341E-2E5A-3E2FE231D64F</TBUID>
			<Name>TMTR-0021: Suspicious Files Detected In System Drive</Name>
			<Description>This generic rule is intended to alert when highly suspicious malware specific file entity is created or modified.

This rule is applicable to Windows platforms.</Description>
			<Severity>1</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="79">
			<TBUID>EF1DB3E1-AFB1-D0FA-16AE-B8361E12DEBC</TBUID>
			<Name>TMTR-0022: Suspicious Files Detected In Recycle Bin</Name>
			<Description>This generic rule is intended to alert when highly suspicious malware specific file entity is created or modified.

This rule is applicable to Windows platforms.</Description>
			<Severity>3</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="144">
			<TBUID>2A7F0BD8-F195-751F-0D85-C69AC89CCDE2</TBUID>
			<Name>Microsoft Windows - Potential Malicious Program Running In WMI (ATT&amp;CK T1084)</Name>
			<Description>This rule alerts when there is change in the WMI Consumer classes.</Description>
			<Severity>4</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>7.0.0.265</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="80">
			<TBUID>14F4BD8E-0F40-2A49-C0E7-201232F7CB23</TBUID>
			<Name>TMTR-0023: Suspicious Changes In NTLM Settings</Name>
			<Description>This generic rule is intended to alert when highly suspicious malware specific registry entity is created or modified.

This rule is applicable to Windows platforms.</Description>
			<Severity>3</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="81">
			<TBUID>3473B2B0-C5BE-770D-337C-494C40E47AAF</TBUID>
			<Name>TMTR-0026: Suspicious Files Detected In Program FIles Folder</Name>
			<Description>This generic rule is intended to alert when highly suspicious malware specific file entity is created or modified.

This rule is applicable to Windows platforms.</Description>
			<Severity>2</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="145">
			<TBUID>238CFE8C-C4FE-5F30-BB60-57F95BD7BEF9</TBUID>
			<Name>Component Object Model Hijacking (ATT&amp;CK T1122, T1112)</Name>
			<Description>Adversaries can use this system to insert malicious code that can be executed in place of legitimate software through hijacking the COM references and relationships as a means for persistence. 
Hijacking a COM object requires a change in the Windows Registry to replace a reference to a legitimate system component which may cause that component to not work when executed.</Description>
			<Severity>2</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="146">
			<TBUID>6DAD9619-F733-CC3C-35FB-735E7A6DC7A6</TBUID>
			<Name>Port Monitor (ATT&amp;CK T1013)</Name>
			<Description>Adversaries can use this technique to load malicious code at startup that will persist on system reboot and execute as SYSTEM.</Description>
			<Severity>2</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="82">
			<TBUID>D249EB66-4DD5-54CF-95D0-60EEEC1164A5</TBUID>
			<Name>TMTR-0020: Suspicious Directories Detected In System Drive</Name>
			<Description>This generic rule is intended to alert when highly suspicious malware specific  directory entity is created or modified.

This rule is applicable to Windows platforms.</Description>
			<Severity>2</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="147">
			<TBUID>5E8890B4-EBDF-2AE9-D386-943C5F703A61</TBUID>
			<Name>Application Shimming (ATT&amp;CK T1138)</Name>
			<Description>The Microsoft Windows Application Compatibility Infrastructure/Framework (Application Shim) was created to allow for backward compatibility of software as the operating system codebase changes over time.

However, certain shims can be abused. Utilizing these shims may allow an adversary to perform several malicious acts such as elevate privileges, install backdoors, disable defenses like Windows Defender, etc.</Description>
			<Severity>2</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="83">
			<TBUID>2766F773-C4B0-2376-1C6E-C6E8BDED0C7C</TBUID>
			<Name>TMTR-0024: Suspicious Files Detected In C Drive</Name>
			<Description>This generic rule is intended to alert when highly suspicious malware specific file entity is created or modified.

This rule is applicable to Windows platforms.</Description>
			<Severity>3</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="148">
			<TBUID>9672834F-9733-EABE-5BF9-3A0058D5EA34</TBUID>
			<Name>AppCert DLLs (ATT&amp;CK T1182)</Name>
			<Description>Dynamic-link libraries (DLLs) that are specified in the AppCertDLLs value in the Registry key HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager are loaded into every process that calls various ubiquitously used application programming interface (API) functions.
This value can be abused to obtain persistence and privilege escalation by causing a malicious DLL to be loaded and run in the context of separate processes on the computer.</Description>
			<Severity>2</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="85">
			<TBUID>DFD8BB39-CDED-C1C6-B62E-4F904DEE98B8</TBUID>
			<Name>TMTR-0003: Suspicious Files Detected In Operating System Directories</Name>
			<Description>This generic rule is intended to alert when highly suspicious malware specific file entity is created or modified. 

This rule is applicable to Windows platforms.</Description>
			<Severity>1</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="149">
			<TBUID>08420A46-33D0-D154-35A3-279EB8D2A912</TBUID>
			<Name>PowerShell &amp; CommandLine (ATT&amp;CK T1086,T1059)</Name>
			<Description>This rule monitors the execution of the command prompt and PowerShell, along with PowerShell execution policy registry key, and the WinRM service.</Description>
			<Severity>2</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="150">
			<TBUID>E816202C-9FA9-5938-461A-96B50924306C</TBUID>
			<Name>Clear Command History (ATT&amp;CK T1146)</Name>
			<Description>Adversaries can use a variety of methods to clear their command history.</Description>
			<Severity>2</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="151">
			<TBUID>44C9AB20-724D-0B85-A7E1-25F9B78E618B</TBUID>
			<Name>Windows Accessibility Features - ImageFileExecution (ATT&amp;CK T1015,T1183)</Name>
			<Description>An adversary can modify the way these programs are launched to get a command prompt or backdoor without logging into the system.</Description>
			<Severity>2</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="152">
			<TBUID>944B8217-487B-F2A2-A6C5-8A5C2E2F0276</TBUID>
			<Name>Time Providers (ATT&amp;CK T1209)</Name>
			<Description>Adversaries may abuse this architecture to establish persistence, specifically by registering and enabling a malicious DLL as a time provider.</Description>
			<Severity>2</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="153">
			<TBUID>4B52636F-530D-0A03-42F9-954DA5C4ECD7</TBUID>
			<Name>Service Registry Permissions Weakness (ATT&amp;CK T1058)</Name>
			<Description>Adversaries can change the service binPath/ImagePath to point to a different executable under their control. When the service starts or is restarted, then the adversary-controlled program will execute, allowing the adversary to gain persistence and/or privilege escalation to the account context the service is set to execute under (local/domain account, SYSTEM, LocalService, or NetworkService).</Description>
			<Severity>2</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="89">
			<TBUID>F3327BC8-A573-B43E-63C7-27337C2FE5B3</TBUID>
			<Name>Microsoft Windows - USB Storage Device Detected (ATT&amp;CK T1092)</Name>
			<Description>This rule alerts when a USB storage device is plugged in the system. It monitors the changes in registry key to detect the attachment and removal of USB storage device.</Description>
			<Severity>2</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="155">
			<TBUID>E0057A18-1722-7A7B-1186-BDC19C435105</TBUID>
			<Name>Install Root Certificate (ATT&amp;CK T1130)</Name>
			<Description>Installation of a root certificate on a compromised system would give an adversary a way to degrade the security of that system. Adversaries have used this technique to avoid security warnings prompting users when compromised systems connect over HTTPS to adversary controlled web servers that spoof legitimate websites in order to collect login credentials.</Description>
			<Severity>2</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="156">
			<TBUID>45EAAAAD-8644-19EC-6C90-1C132862AD17</TBUID>
			<Name>NetSh Helper DLL (ATT&amp;CK T1128)</Name>
			<Description>Adversaries can use netsh.exe with helper DLLs to proxy execution of arbitrary code in a persistent manner when netsh.exe is executed automatically with another persistence technique or if other persistent software is present on the system.</Description>
			<Severity>2</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="158">
			<TBUID>51E60140-6D48-1ACB-79A4-66FF3BD1E21C</TBUID>
			<Name>AppInit DLLs (ATT&amp;CK T1103)</Name>
			<Description>The monitored registry values can be used and abused by adversaries to obtain persistence and privilege escalation by causing a malicious DLL to be loaded and run in the context of separate processes on the computer.</Description>
			<Severity>3</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="159">
			<TBUID>F3443646-816E-CBCC-E3E0-14B68B8C31D8</TBUID>
			<Name>Microsoft Windows - AutoRun Registry Entries Modified (ATT&amp;CK T1013, T1060)</Name>
			<Description>This rule alerts when there is any change in the AutoRun registry entries.</Description>
			<Severity>2</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.637</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="96">
			<TBUID>5073E4A2-ACAC-5D32-26AC-147EB7691C6C</TBUID>
			<Name>TMTR-0004: Suspicious Files Detected In Operating System Directories</Name>
			<Description>This generic rule is intended to alert when a highly suspicious malware specific file entity is created or modified.

This rule is applicable to Windows platforms.</Description>
			<Severity>1</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="97">
			<TBUID>9D9DABF4-FEA0-EB51-F60A-E88A3311B9FD</TBUID>
			<Name>TMTR-0018: Suspicious Files Detected In User Profile Directory</Name>
			<Description>This generic rule is intended to alert when a highly suspicious malware specific file entity is created or modified.


This rule is applicable to Windows platforms.</Description>
			<Severity>2</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="99">
			<TBUID>6B884326-F9E7-F125-2137-DB1E32416DD2</TBUID>
			<Name>TMTR-0016: Suspicious Running Processes Detected</Name>
			<Description>This generic rule is intended to alert when highly suspicious malware specific running processes.

This rule is applicable to Windows platforms.</Description>
			<Severity>3</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="104">
			<TBUID>309556DF-7188-67DB-1F9D-767412D1ADC4</TBUID>
			<Name>Users and Groups - Create and Delete Activity (ATT&amp;CK T1136)</Name>
			<Description>This rule detects creation and deletion of users and groups.

Platform: Windows, Non-Windows</Description>
			<Severity>2</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>7.0.0.596</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.1</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="108">
			<TBUID>6A20EF8B-3B4F-3C67-656C-63EB9AF9182D</TBUID>
			<Name>Microsoft Windows - Startup Programs Modified (ATT&amp;CK T1112, T1060)</Name>
			<Description>This rule alerts when there is any change in file attributes of user Startup programs located under Profiles directories. The rule also monitors directory permissions of Startup Programs found under Profiles directory and modifications in the registries entries created by the Startup Programs and Winlogon. 

The rule provides configuration options to select file attributes to monitor and also to enter files to ignore monitoring which were located under %ProfilesDir%\username\Start Menu\Programs\Startup.</Description>
			<Severity>3</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="56">
			<TBUID>3DE7AE6E-AFF0-BB6B-E0D6-699B306CC83C</TBUID>
			<Name>Local Security Authority (LSA) Notification/Authentication Packages modified (ATT&amp;CK T1131,T1174)</Name>
			<Description>This rule alerts when there is a change in data value of Notification Packages &amp; Authentication Packages of Local Security Authority (LSA) registry key. The rule monitors the change in attributes Size, Type and Contents of data value of Notification Packages under LSA regisrty key.

Note: 
Authentication packages lists the user authentication package that is loaded and called when users attempt to log on to Windows.
Notification packages specifies the dynamic-link libraries (DLLs) that are loaded or called when passwords are set or changed</Description>
			<Severity>2</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="59">
			<TBUID>F238F7C3-EBC2-DDD1-084C-D9E3B7D2C776</TBUID>
			<Name>Task Scheduler Entries Modified (ATT&amp;CK T1168)</Name>
			<Description>An adversary may use job scheduling to execute programs at system startup or on a scheduled basis for Persistence, to conduct Execution as part of Lateral Movement, to gain root privileges, or to run a process under the context of a specific account.

This rule alerts when a scheduled task is created, modified or deleted.</Description>
			<Severity>2</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
		<IntegrityRule doNotMerge="true" id="63">
			<TBUID>6FB29390-F09D-5859-A6C2-537A861DCBE8</TBUID>
			<Name>TMTR-0015: Suspicious Service Detected</Name>
			<Description>This generic rule is intended to alert when highly suspicious malware specific service detected.

This rule is applicable to Windows platforms.</Description>
			<Severity>1</Severity>
			<AllowOnChange>true</AllowOnChange>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<UserEdited>false</UserEdited>
			<RequiresConfiguration>false</RequiresConfiguration>
			<Alert>false</Alert>
			<RecommendationsMode>-1</RecommendationsMode>
			<Tags></Tags>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
		</IntegrityRule>
	</IntegrityRules>
	<IntegrityRuleOverrides>
		<IntegrityRuleOverride id="1">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleID>108</IntegrityRuleID>
			<Alert>true</Alert>
			<AllowOnChange isNull="true"/>
			<OverrideMetadata>false</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
		</IntegrityRuleOverride>
		<IntegrityRuleOverride id="2">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleID>2</IntegrityRuleID>
			<Alert>true</Alert>
			<AllowOnChange isNull="true"/>
			<OverrideMetadata>false</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
		</IntegrityRuleOverride>
		<IntegrityRuleOverride id="3">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleID>56</IntegrityRuleID>
			<Alert>true</Alert>
			<AllowOnChange isNull="true"/>
			<OverrideMetadata>false</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
		</IntegrityRuleOverride>
		<IntegrityRuleOverride id="4">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleID>159</IntegrityRuleID>
			<Alert>true</Alert>
			<AllowOnChange isNull="true"/>
			<OverrideMetadata>false</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
		</IntegrityRuleOverride>
		<IntegrityRuleOverride id="5">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleID>59</IntegrityRuleID>
			<Alert>true</Alert>
			<AllowOnChange isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
		</IntegrityRuleOverride>
		<IntegrityRuleOverride id="6">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleID>89</IntegrityRuleID>
			<Alert>true</Alert>
			<AllowOnChange isNull="true"/>
			<OverrideMetadata>false</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
		</IntegrityRuleOverride>
		<IntegrityRuleOverride id="7">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleID>104</IntegrityRuleID>
			<Alert>true</Alert>
			<AllowOnChange isNull="true"/>
			<OverrideMetadata>false</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
		</IntegrityRuleOverride>
		<IntegrityRuleOverride id="8">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleID>149</IntegrityRuleID>
			<Alert>true</Alert>
			<AllowOnChange isNull="true"/>
			<OverrideMetadata>false</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
		</IntegrityRuleOverride>
		<IntegrityRuleOverride id="9">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleID>151</IntegrityRuleID>
			<Alert>true</Alert>
			<AllowOnChange isNull="true"/>
			<OverrideMetadata>false</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
		</IntegrityRuleOverride>
		<IntegrityRuleOverride id="10">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleID>158</IntegrityRuleID>
			<Alert>true</Alert>
			<AllowOnChange isNull="true"/>
			<OverrideMetadata>false</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
		</IntegrityRuleOverride>
		<IntegrityRuleOverride id="11">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleID>148</IntegrityRuleID>
			<Alert>true</Alert>
			<AllowOnChange isNull="true"/>
			<OverrideMetadata>false</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
		</IntegrityRuleOverride>
		<IntegrityRuleOverride id="12">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleID>156</IntegrityRuleID>
			<Alert>true</Alert>
			<AllowOnChange isNull="true"/>
			<OverrideMetadata>false</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
		</IntegrityRuleOverride>
		<IntegrityRuleOverride id="13">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleID>147</IntegrityRuleID>
			<Alert>true</Alert>
			<AllowOnChange isNull="true"/>
			<OverrideMetadata>false</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
		</IntegrityRuleOverride>
		<IntegrityRuleOverride id="14">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleID>153</IntegrityRuleID>
			<Alert>true</Alert>
			<AllowOnChange isNull="true"/>
			<OverrideMetadata>false</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
		</IntegrityRuleOverride>
		<IntegrityRuleOverride id="15">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleID>152</IntegrityRuleID>
			<Alert>true</Alert>
			<AllowOnChange isNull="true"/>
			<OverrideMetadata>false</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
		</IntegrityRuleOverride>
		<IntegrityRuleOverride id="16">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleID>146</IntegrityRuleID>
			<Alert>true</Alert>
			<AllowOnChange isNull="true"/>
			<OverrideMetadata>false</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
		</IntegrityRuleOverride>
		<IntegrityRuleOverride id="17">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleID>155</IntegrityRuleID>
			<Alert>true</Alert>
			<AllowOnChange isNull="true"/>
			<OverrideMetadata>false</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
		</IntegrityRuleOverride>
		<IntegrityRuleOverride id="18">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleID>145</IntegrityRuleID>
			<Alert>true</Alert>
			<AllowOnChange isNull="true"/>
			<OverrideMetadata>false</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
		</IntegrityRuleOverride>
		<IntegrityRuleOverride id="19">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleID>150</IntegrityRuleID>
			<Alert>false</Alert>
			<AllowOnChange isNull="true"/>
			<OverrideMetadata>false</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
		</IntegrityRuleOverride>
		<IntegrityRuleOverride id="20">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleID>1</IntegrityRuleID>
			<Alert>true</Alert>
			<AllowOnChange isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
		</IntegrityRuleOverride>
		<IntegrityRuleOverride id="21">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleID>77</IntegrityRuleID>
			<Alert isNull="true"/>
			<AllowOnChange isNull="true"/>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
		</IntegrityRuleOverride>
		<IntegrityRuleOverride id="22">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleID>144</IntegrityRuleID>
			<Alert>true</Alert>
			<AllowOnChange isNull="true"/>
			<OverrideMetadata>false</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
		</IntegrityRuleOverride>
	</IntegrityRuleOverrides>
	<IntegrityRuleMetadatas>
		<IntegrityRuleMetadata doNotMerge="true" id="1">
			<TBUID>404EC63C-C679-D1E1-4535-A9C5675FECC2</TBUID>
			<Version>8</Version>
			<IntegrityRuleID>1</IntegrityRuleID>
			<Name>servicenames</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="2">
			<TBUID>AA068716-5101-A1BC-DA7C-3383DFFF60DE</TBUID>
			<Version>8</Version>
			<IntegrityRuleID>1</IntegrityRuleID>
			<Name>permissions</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="3">
			<TBUID>C8E61F30-8355-1313-6011-66BC11A70B00</TBUID>
			<Version>8</Version>
			<IntegrityRuleID>1</IntegrityRuleID>
			<Name>owner</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="4">
			<TBUID>15E4C808-E446-943B-45EC-1ADBAF1203AA</TBUID>
			<Version>8</Version>
			<IntegrityRuleID>1</IntegrityRuleID>
			<Name>group</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="5">
			<TBUID>F5DFC981-F933-6A27-ABA2-6CD04C7F7E57</TBUID>
			<Version>8</Version>
			<IntegrityRuleID>1</IntegrityRuleID>
			<Name>binarypathname</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="6">
			<TBUID>1C8B6931-428D-4E86-0403-69B577995D45</TBUID>
			<Version>8</Version>
			<IntegrityRuleID>1</IntegrityRuleID>
			<Name>description</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="7">
			<TBUID>C849431D-A052-6742-3AEA-2F46BF76A9B5</TBUID>
			<Version>8</Version>
			<IntegrityRuleID>1</IntegrityRuleID>
			<Name>state</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="8">
			<TBUID>F04718EA-84A2-82A0-0F97-D241BE461407</TBUID>
			<Version>8</Version>
			<IntegrityRuleID>1</IntegrityRuleID>
			<Name>starttype</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="9">
			<TBUID>0E87BDF8-F74A-6922-D228-EC27C4DBE174</TBUID>
			<Version>8</Version>
			<IntegrityRuleID>1</IntegrityRuleID>
			<Name>logonas</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="10">
			<TBUID>8AE12AE6-CE5C-5CC2-565D-0FD7F5F676ED</TBUID>
			<Version>8</Version>
			<IntegrityRuleID>1</IntegrityRuleID>
			<Name>firstfailure</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="11">
			<TBUID>C67BD943-E5BA-2944-2F8D-E0D0297F9A99</TBUID>
			<Version>8</Version>
			<IntegrityRuleID>1</IntegrityRuleID>
			<Name>secondfailure</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="12">
			<TBUID>833645D7-9ED6-08F5-59F0-B8F2BE322DDA</TBUID>
			<Version>8</Version>
			<IntegrityRuleID>1</IntegrityRuleID>
			<Name>subsequentfailures</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="13">
			<TBUID>DBA3E185-26BB-46E3-ACD5-8A038BCD38BC</TBUID>
			<Version>8</Version>
			<IntegrityRuleID>1</IntegrityRuleID>
			<Name>resetfailcountafter</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="14">
			<TBUID>F2F0973D-D5C2-77DC-6C59-A8A85853F829</TBUID>
			<Version>8</Version>
			<IntegrityRuleID>1</IntegrityRuleID>
			<Name>runprogram</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="15">
			<TBUID>CC24E1B3-0462-61F8-1668-B3F61AFB275A</TBUID>
			<Version>8</Version>
			<IntegrityRuleID>1</IntegrityRuleID>
			<Name>dependson</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="16">
			<TBUID>A1606D9E-E3F9-60AF-CCC5-356794277624</TBUID>
			<Version>8</Version>
			<IntegrityRuleID>1</IntegrityRuleID>
			<Name>loadordergroup</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="17">
			<TBUID>76B7775F-F164-A8CE-3C4B-1109D5FEB28C</TBUID>
			<Version>8</Version>
			<IntegrityRuleID>1</IntegrityRuleID>
			<Name>processid</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="18">
			<TBUID>F3F457A4-99D5-FD89-6E84-978AF1EB380E</TBUID>
			<Version>7</Version>
			<IntegrityRuleID>2</IntegrityRuleID>
			<Name>filenames</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="19">
			<TBUID>B0A54ECF-BF81-2967-5B02-DFBCCC375A94</TBUID>
			<Version>7</Version>
			<IntegrityRuleID>2</IntegrityRuleID>
			<Name>created</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="20">
			<TBUID>B4CB14C0-AEEB-0EE6-6181-826929F9AECB</TBUID>
			<Version>7</Version>
			<IntegrityRuleID>2</IntegrityRuleID>
			<Name>lastmodified</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="21">
			<TBUID>821A5974-8545-FF8B-F008-5AC447479F28</TBUID>
			<Version>7</Version>
			<IntegrityRuleID>2</IntegrityRuleID>
			<Name>permissions</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="22">
			<TBUID>ACDBEE3C-D6E3-FC6B-1467-6EA67A1C60DB</TBUID>
			<Version>7</Version>
			<IntegrityRuleID>2</IntegrityRuleID>
			<Name>owner</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="23">
			<TBUID>75892154-B687-4F61-DDB1-3F5827938095</TBUID>
			<Version>7</Version>
			<IntegrityRuleID>2</IntegrityRuleID>
			<Name>group</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="24">
			<TBUID>0B195770-E6BE-F6BE-999F-02C9F138BE16</TBUID>
			<Version>7</Version>
			<IntegrityRuleID>2</IntegrityRuleID>
			<Name>size</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="25">
			<TBUID>4E43A817-680C-E318-A236-83E35C881633</TBUID>
			<Version>7</Version>
			<IntegrityRuleID>2</IntegrityRuleID>
			<Name>contents</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="417">
			<TBUID>4ED46E1E-528F-E0AB-98B4-CA4D3AB44EEF</TBUID>
			<Version>3</Version>
			<IntegrityRuleID>149</IntegrityRuleID>
			<Name>executionpolicy</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="418">
			<TBUID>1B4FE2E3-ED5D-0044-43C4-DB025B0E9D8A</TBUID>
			<Version>3</Version>
			<IntegrityRuleID>149</IntegrityRuleID>
			<Name>cmd</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="419">
			<TBUID>44DF9DCC-9EB3-E926-B61E-15D6E9A312ED</TBUID>
			<Version>3</Version>
			<IntegrityRuleID>149</IntegrityRuleID>
			<Name>powershell</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="420">
			<TBUID>59CDDDF5-D154-B94B-927C-0F5BAF7E5D8F</TBUID>
			<Version>3</Version>
			<IntegrityRuleID>149</IntegrityRuleID>
			<Name>winrmservice</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="421">
			<TBUID>CDC99DE9-6C43-BDCC-CF77-394D2E86718C</TBUID>
			<Version>3</Version>
			<IntegrityRuleID>150</IntegrityRuleID>
			<Name>username</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="422">
			<TBUID>0BA8C926-D2FF-2624-316D-A0147C16CB8E</TBUID>
			<Version>8</Version>
			<IntegrityRuleID>151</IntegrityRuleID>
			<Name>DisplaySwitch</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="423">
			<TBUID>73B30F85-7603-E869-80DD-FDFA381E976F</TBUID>
			<Version>8</Version>
			<IntegrityRuleID>151</IntegrityRuleID>
			<Name>atbroker</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="424">
			<TBUID>1CC717C6-E751-794B-A7F5-D38E8E5ABBCD</TBUID>
			<Version>8</Version>
			<IntegrityRuleID>151</IntegrityRuleID>
			<Name>narrator</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="425">
			<TBUID>5BF74C51-91D8-5597-A0B8-0AD261A47728</TBUID>
			<Version>8</Version>
			<IntegrityRuleID>151</IntegrityRuleID>
			<Name>osk</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="426">
			<TBUID>3FE11E3F-7029-FF1F-F8E2-1C850DECB18B</TBUID>
			<Version>8</Version>
			<IntegrityRuleID>151</IntegrityRuleID>
			<Name>sethc</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="427">
			<TBUID>A2D901C5-B8EA-505D-1D55-375E7B667AA9</TBUID>
			<Version>8</Version>
			<IntegrityRuleID>151</IntegrityRuleID>
			<Name>utilman</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="428">
			<TBUID>8987DB40-411A-DDF5-DEBC-4A4C098C02CD</TBUID>
			<Version>8</Version>
			<IntegrityRuleID>151</IntegrityRuleID>
			<Name>magnify</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="307">
			<TBUID>5F49B6D3-7128-A670-6B03-7FC171B2415D</TBUID>
			<Version>4</Version>
			<IntegrityRuleID>104</IntegrityRuleID>
			<Name>groupname</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="308">
			<TBUID>FB6DF49C-C2EE-BE2A-568B-2B93E2922CB4</TBUID>
			<Version>4</Version>
			<IntegrityRuleID>104</IntegrityRuleID>
			<Name>username</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="310">
			<TBUID>41104677-984F-0AFE-B85B-813AE0A72C94</TBUID>
			<Version>16</Version>
			<IntegrityRuleID>108</IntegrityRuleID>
			<Name>filenames</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="311">
			<TBUID>42E815B2-B86C-4304-A172-757D4B1417B6</TBUID>
			<Version>16</Version>
			<IntegrityRuleID>108</IntegrityRuleID>
			<Name>created</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="312">
			<TBUID>AE28E862-A5E9-6A29-8949-84947E92F5AE</TBUID>
			<Version>16</Version>
			<IntegrityRuleID>108</IntegrityRuleID>
			<Name>lastmodified</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="313">
			<TBUID>933EDA77-57CF-455B-2B3A-54AAF2421A14</TBUID>
			<Version>16</Version>
			<IntegrityRuleID>108</IntegrityRuleID>
			<Name>permissions</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="314">
			<TBUID>720819AA-BD91-9394-450E-9B2FAE54BD39</TBUID>
			<Version>16</Version>
			<IntegrityRuleID>108</IntegrityRuleID>
			<Name>owner</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="315">
			<TBUID>63490803-7A17-D617-E38F-2C5696635826</TBUID>
			<Version>16</Version>
			<IntegrityRuleID>108</IntegrityRuleID>
			<Name>group</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="316">
			<TBUID>3FD5F2C6-2176-FCD9-EA08-D41484BD79CD</TBUID>
			<Version>16</Version>
			<IntegrityRuleID>108</IntegrityRuleID>
			<Name>size</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="317">
			<TBUID>4C56F366-A5AC-B494-B764-BD4D3C2DA403</TBUID>
			<Version>16</Version>
			<IntegrityRuleID>108</IntegrityRuleID>
			<Name>contents</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="447">
			<TBUID>FA6E7952-0F77-7BCC-DE05-47AA320D1892</TBUID>
			<Version>4</Version>
			<IntegrityRuleID>72</IntegrityRuleID>
			<Name>filenames</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="448">
			<TBUID>9784BD14-4E54-7890-F19C-99205703875D</TBUID>
			<Version>2</Version>
			<IntegrityRuleID>96</IntegrityRuleID>
			<Name>filePaths</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="449">
			<TBUID>420E15CD-43C1-F5D1-2A0A-8633472AB075</TBUID>
			<Version>3</Version>
			<IntegrityRuleID>85</IntegrityRuleID>
			<Name>filePaths</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="450">
			<TBUID>A2A82E0F-2E5F-AB85-86C4-E0F81B2D7FD3</TBUID>
			<Version>2</Version>
			<IntegrityRuleID>81</IntegrityRuleID>
			<Name>filenames</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="451">
			<TBUID>FA78DCDC-35B5-647F-9C78-FDAAFA85F8D0</TBUID>
			<Version>2</Version>
			<IntegrityRuleID>97</IntegrityRuleID>
			<Name>filenames</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="452">
			<TBUID>6785D513-E951-5AE5-2EFB-D966200E20D6</TBUID>
			<Version>4</Version>
			<IntegrityRuleID>76</IntegrityRuleID>
			<Name>filenames</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="453">
			<TBUID>CE116FB7-D3FD-F02E-C94F-0BA94D412659</TBUID>
			<Version>1</Version>
			<IntegrityRuleID>77</IntegrityRuleID>
			<Name>filenames</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="454">
			<TBUID>CA917F50-8E09-7D4D-499E-D2F28CB64B92</TBUID>
			<Version>3</Version>
			<IntegrityRuleID>82</IntegrityRuleID>
			<Name>filenames</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="455">
			<TBUID>BF0138A5-F6EE-81F6-F843-EF16637F374E</TBUID>
			<Version>5</Version>
			<IntegrityRuleID>73</IntegrityRuleID>
			<Name>filenames</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="456">
			<TBUID>7FD57FE5-FFF8-9470-0A15-DFBE64D137BE</TBUID>
			<Version>4</Version>
			<IntegrityRuleID>63</IntegrityRuleID>
			<Name>ssdpsrv</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="457">
			<TBUID>A0A45045-B531-72D8-698A-F4689828A194</TBUID>
			<Version>4</Version>
			<IntegrityRuleID>63</IntegrityRuleID>
			<Name>upnphost</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="458">
			<TBUID>B51EDB02-7CBC-DAA4-406C-203E49AE34E2</TBUID>
			<Version>4</Version>
			<IntegrityRuleID>63</IntegrityRuleID>
			<Name>dhcp</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="459">
			<TBUID>923973B6-71DC-D1AA-93DB-C09FB7EE8B56</TBUID>
			<Version>4</Version>
			<IntegrityRuleID>63</IntegrityRuleID>
			<Name>dnscache</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="460">
			<TBUID>6654B491-35DE-E6CD-21CE-8182FF1ACD05</TBUID>
			<Version>4</Version>
			<IntegrityRuleID>63</IntegrityRuleID>
			<Name>netbt</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="461">
			<TBUID>84D73E41-7988-D871-4209-80BAF1760E1E</TBUID>
			<Version>4</Version>
			<IntegrityRuleID>63</IntegrityRuleID>
			<Name>kdc</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="462">
			<TBUID>ACC91C4A-43F1-5C8B-495A-25EA3E98C3BD</TBUID>
			<Version>4</Version>
			<IntegrityRuleID>63</IntegrityRuleID>
			<Name>wmi</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="463">
			<TBUID>93C547FB-3815-AC17-D210-2195165C3294</TBUID>
			<Version>4</Version>
			<IntegrityRuleID>63</IntegrityRuleID>
			<Name>dcomlaunch</Name>
			<Value>true</Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="464">
			<TBUID>80AD2221-A8F0-26EB-7737-9A3C459EF10C</TBUID>
			<Version>4</Version>
			<IntegrityRuleID>70</IntegrityRuleID>
			<Name>filenames</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="465">
			<TBUID>1B69ECAB-5C72-96A1-F7CF-0CB7E3ED1950</TBUID>
			<Version>4</Version>
			<IntegrityRuleID>69</IntegrityRuleID>
			<Name>filenames</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="466">
			<TBUID>8FAF4A1C-9104-2BDF-6D1D-6594A6FCBEAC</TBUID>
			<Version>4</Version>
			<IntegrityRuleID>78</IntegrityRuleID>
			<Name>filenames</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="467">
			<TBUID>753F14AF-E726-F79F-13A0-7732E6D4DD07</TBUID>
			<Version>2</Version>
			<IntegrityRuleID>108</IntegrityRuleID>
			<Name>regname</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="225">
			<TBUID>BAED7746-C7CE-C00F-9FCC-865979BCD9D4</TBUID>
			<Version>4</Version>
			<IntegrityRuleID>59</IntegrityRuleID>
			<Name>exception</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
		<IntegrityRuleMetadata doNotMerge="true" id="226">
			<TBUID>96B4F8B2-50F1-F257-B900-72AEB7CD910D</TBUID>
			<Version>4</Version>
			<IntegrityRuleID>59</IntegrityRuleID>
			<Name>exceptiondir</Name>
			<Value></Value>
			<UserEditable>true</UserEditable>
		</IntegrityRuleMetadata>
	</IntegrityRuleMetadatas>
	<IntegrityRuleMetadataOverrides>
		<IntegrityRuleMetadataOverride id="64">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleMetadataID>8</IntegrityRuleMetadataID>
			<Value>true</Value>
		</IntegrityRuleMetadataOverride>
		<IntegrityRuleMetadataOverride id="65">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleMetadataID>7</IntegrityRuleMetadataID>
			<Value>true</Value>
		</IntegrityRuleMetadataOverride>
		<IntegrityRuleMetadataOverride id="66">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleMetadataID>6</IntegrityRuleMetadataID>
			<Value>true</Value>
		</IntegrityRuleMetadataOverride>
		<IntegrityRuleMetadataOverride id="35">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleMetadataID>453</IntegrityRuleMetadataID>
			<Value>set*.tmp</Value>
		</IntegrityRuleMetadataOverride>
		<IntegrityRuleMetadataOverride id="67">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleMetadataID>5</IntegrityRuleMetadataID>
			<Value>true</Value>
		</IntegrityRuleMetadataOverride>
		<IntegrityRuleMetadataOverride id="68">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleMetadataID>4</IntegrityRuleMetadataID>
			<Value>true</Value>
		</IntegrityRuleMetadataOverride>
		<IntegrityRuleMetadataOverride id="69">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleMetadataID>3</IntegrityRuleMetadataID>
			<Value>true</Value>
		</IntegrityRuleMetadataOverride>
		<IntegrityRuleMetadataOverride id="70">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleMetadataID>2</IntegrityRuleMetadataID>
			<Value>true</Value>
		</IntegrityRuleMetadataOverride>
		<IntegrityRuleMetadataOverride id="71">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleMetadataID>1</IntegrityRuleMetadataID>
			<Value>UserDataSvc_*,StateRepository,TabletInputService,WpnUserService_*,UnistoreSvc_*,UserDataSvc_*,TokenBroker,PimIndexMaintenanceSvc_*,PrintWorkflowUserSvc_*,NetSetupSvc,CaptureService_*,cbdhsvc_*,CDPUserSvc_*,ConsentUxUserSvc_*,DevicesFlowUserSvc_*,Appinfo,AppXSvc,sppsvc,TrustedInstaller,ClipSVC,camsvc,StorSvc,ds_agent,rpcapd,wlidsvc,msiserver,DoSvc,WPDBusEnum,DsmSvc</Value>
		</IntegrityRuleMetadataOverride>
		<IntegrityRuleMetadataOverride id="72">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleMetadataID>226</IntegrityRuleMetadataID>
			<Value></Value>
		</IntegrityRuleMetadataOverride>
		<IntegrityRuleMetadataOverride id="73">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleMetadataID>225</IntegrityRuleMetadataID>
			<Value>svcrestarttask</Value>
		</IntegrityRuleMetadataOverride>
		<IntegrityRuleMetadataOverride id="55">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleMetadataID>17</IntegrityRuleMetadataID>
			<Value>true</Value>
		</IntegrityRuleMetadataOverride>
		<IntegrityRuleMetadataOverride id="56">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleMetadataID>16</IntegrityRuleMetadataID>
			<Value>true</Value>
		</IntegrityRuleMetadataOverride>
		<IntegrityRuleMetadataOverride id="57">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleMetadataID>15</IntegrityRuleMetadataID>
			<Value>true</Value>
		</IntegrityRuleMetadataOverride>
		<IntegrityRuleMetadataOverride id="58">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleMetadataID>14</IntegrityRuleMetadataID>
			<Value>true</Value>
		</IntegrityRuleMetadataOverride>
		<IntegrityRuleMetadataOverride id="59">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleMetadataID>13</IntegrityRuleMetadataID>
			<Value>true</Value>
		</IntegrityRuleMetadataOverride>
		<IntegrityRuleMetadataOverride id="60">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleMetadataID>12</IntegrityRuleMetadataID>
			<Value>true</Value>
		</IntegrityRuleMetadataOverride>
		<IntegrityRuleMetadataOverride id="61">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleMetadataID>11</IntegrityRuleMetadataID>
			<Value>true</Value>
		</IntegrityRuleMetadataOverride>
		<IntegrityRuleMetadataOverride id="62">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleMetadataID>10</IntegrityRuleMetadataID>
			<Value>true</Value>
		</IntegrityRuleMetadataOverride>
		<IntegrityRuleMetadataOverride id="63">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<IntegrityRuleMetadataID>9</IntegrityRuleMetadataID>
			<Value>true</Value>
		</IntegrityRuleMetadataOverride>
	</IntegrityRuleMetadataOverrides>
	<SecurityProfileIntegrityRules>
		<SecurityProfileIntegrityRule isBridge="true" id="128">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>153</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="129">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>144</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="130">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>70</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="131">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>75</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="132">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>148</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="133">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>96</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="134">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>152</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="135">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>2</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="136">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>79</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="92">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>67</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="93">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>71</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="94">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>97</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="95">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>156</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="96">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>147</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="97">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>76</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="98">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>151</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="99">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>59</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="100">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>80</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="101">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>89</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="102">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>63</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="103">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>85</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="104">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>68</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="105">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>159</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="106">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>81</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="107">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>72</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="108">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>155</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="109">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>146</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="110">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>73</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="111">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>64</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="112">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>77</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="113">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>158</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="114">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>65</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="115">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>82</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="116">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>69</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="117">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>99</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="118">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>56</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="119">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>1</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="120">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>74</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="121">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>145</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="122">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>108</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="123">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>78</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="124">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>149</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="125">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>66</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="126">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>83</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
		<SecurityProfileIntegrityRule isBridge="true" id="127">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<IntegrityRuleID>104</IntegrityRuleID>
		</SecurityProfileIntegrityRule>
	</SecurityProfileIntegrityRules>
	<LogInspectionRules>
		<LogInspectionRule doNotMerge="true" id="40">
			<TBUID>D792378A-63A8-9AC6-3721-B6BA264918CF</TBUID>
			<Name>Microsoft Windows Events</Name>
			<Description>Inspect the event logs of Microsoft Windows (2000, XP, 2003) operating systems for events.

Platform: Microsoft Windows</Description>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>63780BA6-0BA2-EA4F-1A46-EA51B6891214</RequiresTBUIDs>
			<UserEdited>false</UserEdited>
			<Alert>false</Alert>
			<AlertMinSeverity>4</AlertMinSeverity>
			<DependedOn>true</DependedOn>
			<RecommendationsMode>1</RecommendationsMode>
			<RuleIDCache>18100,18101,18102,18103,18104,18105,18106,18107,18108,18109,18110,18111,18112,18113,18114,18115,18116,18118,18179,18119,18120,18121,18125,18127,18128,18129,18130,18131,18132,18133,18134,18135,18136,18137,18138,18139,18140,18142,18143,18144,18145,18146,18147,18149,18170,18171,18172,18151,18152,18153,18154,18155,18156,18173,18126,18175,18176,18177,18182</RuleIDCache>
		</LogInspectionRule>
		<LogInspectionRule doNotMerge="true" id="46">
			<TBUID>7BCE8234-42FC-DF23-F61B-34B56AF47B81</TBUID>
			<Name>Microsoft Windows Security Events - 4</Name>
			<Description>Inspect the event logs of Microsoft Windows operating systems for Security events.

Platform: Microsoft Windows 2016, Windows 10,  Windows 2012, Windows 2008, Windows 7, Windows 8 and Windows Vista.</Description>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>D792378A-63A8-9AC6-3721-B6BA264918CF,63780BA6-0BA2-EA4F-1A46-EA51B6891214</RequiresTBUIDs>
			<UserEdited>false</UserEdited>
			<Alert>false</Alert>
			<AlertMinSeverity>4</AlertMinSeverity>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>1</RecommendationsMode>
			<RuleIDCache>814000,814001,814002,814003,814004,814005,814006,814007,814008,814009,814010,814011,814012,814013,814014,814015,814016,814017,814018,814019,814020,814021,814022,814023,814024,814025,814026,814027,814028,814029,814030,814031,814032,814033,814034,814035,814036,814037,814038,814039,814040,814041,814042,814043,814044,814045,814046,814047</RuleIDCache>
		</LogInspectionRule>
		<LogInspectionRule doNotMerge="true" id="47">
			<TBUID>CF24FD50-3491-8634-5F4B-19AD7260CAA1</TBUID>
			<Name>Microsoft Windows Security Events</Name>
			<Description>Inspect the event logs of Microsoft Windows operating systems for Security events.

Platform: Microsoft Windows (2000, XP, 2003)</Description>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>63780BA6-0BA2-EA4F-1A46-EA51B6891214,D792378A-63A8-9AC6-3721-B6BA264918CF</RequiresTBUIDs>
			<UserEdited>false</UserEdited>
			<Alert>false</Alert>
			<AlertMinSeverity>4</AlertMinSeverity>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>1</RecommendationsMode>
			<RuleIDCache>18203,18204,18205,18206,18207,18208,18209,18210,18211,18212,18213,18214,18215,18216,18217,18218,18219,18220,18221,18222,18223,18253,18224,18225,18226,18227,18228,18229,18230,18231,18232,18233,18234,18235,18236,18237,18238,18239,18240,18241,18242,18243,18244,18245,18246,18247,18248,18249,18252,18250,18251</RuleIDCache>
		</LogInspectionRule>
		<LogInspectionRule doNotMerge="true" id="48">
			<TBUID>EFECC956-A762-6BA4-91D9-E745BCA7A259</TBUID>
			<Name>Microsoft Windows Security Events - 2</Name>
			<Description>Inspect the event logs of Microsoft Windows operating systems for Security events.

Platform: Microsoft Windows 2016, Windows 10,  Windows 2012, Windows 2008, Windows 7, Windows 8 and Windows Vista</Description>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>63780BA6-0BA2-EA4F-1A46-EA51B6891214,D792378A-63A8-9AC6-3721-B6BA264918CF</RequiresTBUIDs>
			<UserEdited>false</UserEdited>
			<Alert>false</Alert>
			<AlertMinSeverity>4</AlertMinSeverity>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>1</RecommendationsMode>
			<RuleIDCache>18406,18408,18409,18410,18411,18412,18413,18414,18415,18416,18417,18418,18419,18420,18421,18422,18423,18424,18425,18426,18427,18428,18429,18430,18431,18432,18433,18434,18435,18436,18437,18438</RuleIDCache>
		</LogInspectionRule>
		<LogInspectionRule doNotMerge="true" id="50">
			<TBUID>02A140CE-6970-3EF8-D7C9-F2936B8BE839</TBUID>
			<Name>Microsoft Windows Security Events - 1</Name>
			<Description>Inspect the event logs of Microsoft Windows operating systems for Security events.

Platform: Microsoft Windows 2016, Windows 10,  Windows 2012, Windows 2008, Windows 7, Windows 8 and Windows Vista.</Description>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>63780BA6-0BA2-EA4F-1A46-EA51B6891214,D792378A-63A8-9AC6-3721-B6BA264918CF</RequiresTBUIDs>
			<UserEdited>false</UserEdited>
			<Alert>false</Alert>
			<AlertMinSeverity>4</AlertMinSeverity>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>1</RecommendationsMode>
			<RuleIDCache>18306,18307,18308,18309,18310,18311,18312,18313,18314,18315,18316,18317,18318,18319,18320,18321,18322,18323,18324,18325,18326,18329,18330,18331,18332,18333,18334,18335,18336,18337,18338,18339,18340,18341,18342,18343,18344,18345,18350,18346,18347,18348,18349,18351,18352,18353,18354,18357,18358,18360,18361,18362,18363,18364,18365,18366,18367,18368,18369,18370,18371,18373,18376,18377,18378,18379,18380,18382,18383,18384,18385,18386,18387,19811</RuleIDCache>
		</LogInspectionRule>
		<LogInspectionRule doNotMerge="true" id="20">
			<TBUID>63780BA6-0BA2-EA4F-1A46-EA51B6891214</TBUID>
			<Name>Default Rules Configuration</Name>
			<Description>Common configuration rules used the other Log Inspection Rules. By itself this rule does not inspect events, but is required for all the other Log Inspection Rules.</Description>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<MinimumManagerVersion>6.0.1156</MinimumManagerVersion>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs></RequiresTBUIDs>
			<UserEdited>false</UserEdited>
			<Alert>false</Alert>
			<AlertMinSeverity>4</AlertMinSeverity>
			<DependedOn>true</DependedOn>
			<RecommendationsMode>1</RecommendationsMode>
			<RuleIDCache>01,02,03,04,05,06,07,08</RuleIDCache>
		</LogInspectionRule>
		<LogInspectionRule doNotMerge="true" id="56">
			<TBUID>6D8DAA74-1800-B930-CB41-68FD63141433</TBUID>
			<Name>Microsoft Windows Security Events - 3</Name>
			<Description>Inspect the event logs of Microsoft Windows operating systems for Security events.

Platform: Microsoft Windows 2016, Windows 10,  Windows 2012, Windows 2008, Windows 7, Windows 8 and Windows Vista.</Description>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>D792378A-63A8-9AC6-3721-B6BA264918CF,63780BA6-0BA2-EA4F-1A46-EA51B6891214</RequiresTBUIDs>
			<UserEdited>false</UserEdited>
			<Alert>false</Alert>
			<AlertMinSeverity>4</AlertMinSeverity>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>1</RecommendationsMode>
			<RuleIDCache>904001,904002,904003,904004,904012,904013,904014,904015,904016,904018,904022,904023,904024,904025,904026,904081,904047,904029,904030,904082,904031,904032,904035,904036,904037,904041,904042,904043,904044,904046,904048,904049,904050,904051,904052,904053,904054,904055,904056,904057,904058,904059,904060,904061,904062,904070,904071,904072,904073,904074,904078,904084,804090,904085,904075,904085,904075,904086,904087,904088,904089,904090,904091,904092,904093,904094,904095,904096,904097</RuleIDCache>
		</LogInspectionRule>
		<LogInspectionRule doNotMerge="true" id="57">
			<TBUID>DA33F822-CCC4-7064-3468-34B61AA243B0</TBUID>
			<Name>Directory Server - Microsoft Windows Active Directory</Name>
			<Description>Inspect the event logs of Microsoft Windows Active Directory Services.

Platform: Microsoft Windows</Description>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>63780BA6-0BA2-EA4F-1A46-EA51B6891214</RequiresTBUIDs>
			<UserEdited>false</UserEdited>
			<Alert>false</Alert>
			<AlertMinSeverity>4</AlertMinSeverity>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>1</RecommendationsMode>
			<RuleIDCache>85200,85201,85202,85203,85204,85205,85206,85207,85208,85209,85210,85275,85211,85212,85213,85214,85215,85216,85217,85218,85218,85219,85219,85220,85221,85222,85230,85231,85232,85233,85234,85235,85236,85237,85240,85241,85242,85243,85244,85245,85246,85250,85251,85252,85253,85254,85255,85256,85257,85266,85258,85259,85260,85261,85262,85276,85263,85264,85265,85280,85281,85282,85290,85291,85292,85295,85296,85297,85298</RuleIDCache>
		</LogInspectionRule>
		<LogInspectionRule doNotMerge="true" id="59">
			<TBUID>0E2DE4BB-509E-5254-0EEA-E0FCE3A6CC9D</TBUID>
			<Name>Microsoft Windows Sysmon Events IDs</Name>
			<Description>This Log Inspection rule monitors the all events generated by System Monitor (Sysmon) Tool.</Description>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>63780BA6-0BA2-EA4F-1A46-EA51B6891214,D792378A-63A8-9AC6-3721-B6BA264918CF</RequiresTBUIDs>
			<UserEdited>false</UserEdited>
			<Alert>false</Alert>
			<AlertMinSeverity>4</AlertMinSeverity>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<RuleIDCache>18950,18951,18952,18953,18954,18955,18956,18957,18958,18959,18960,18961,18962,18963,18964,18965,18966,18967,18968,18969,18970,18971,18972</RuleIDCache>
		</LogInspectionRule>
		<LogInspectionRule doNotMerge="true" id="60">
			<TBUID>D0500F9E-D628-A529-D45F-DE9269277340</TBUID>
			<Name>Microsoft Windows Sysmon Events - 1</Name>
			<Description>This Log Inspection rule monitors the events generated by System Monitor (Sysmon). It is a Windows system service and device driver that, once installed on a system, remains resident across system reboots to monitor and log system activity to the Windows event log and provides detailed information about process creations, network connections, and changes to file creation time.</Description>
			<MinimumAgentVersion>12.0.0.0</MinimumAgentVersion>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>D792378A-63A8-9AC6-3721-B6BA264918CF,63780BA6-0BA2-EA4F-1A46-EA51B6891214</RequiresTBUIDs>
			<UserEdited>false</UserEdited>
			<Alert>false</Alert>
			<AlertMinSeverity>4</AlertMinSeverity>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<RuleIDCache>18862,18863,18855,18841,18803,18813,18844,18861,18834,18823,18800,18814,18839,18813,18823,18834,18823,18802,18813,18835,18803,18803,18833,18861,18850,18859,18857,18864,18824,18859,18821,18807,18851,18807,18819,18807,18859,18832,18823,18823,18813,18823,18842,18842,18840,18861,18807,18804,18848,18823,18812,18849,18829,18829,18829,18829,18865,18820,18828,18813,18813,18811,18859,18811,18800,18841,18834,18834,18834,18856,18821,18826,18856,18806,18806,18806,18806,18866,18824,18859,18859,18833,18833,18851,18845,18806,18859,18832,18832,18806,18806,18818,18859,18861,18861,18820,18857,18861,18861,18812,18861,18851,18861,18807,18861,18808,18861,18814,18814,18823,18823,18842,18861,18861,18831,18823,18812,18820,18834,18823,18809,18809,18809,18814,18861,18822,18818,18818,18832,18820,18818,18832,18820,18849,18844,18827,18851,18854,18832,18832,18854,18844,18858,18858,18846,18834,18834,18834,18834,18834,18833,18833,18838,18801,18801,18801,18833,18834,18834,18834,18834,18834,18834,18834,18858,18858,18853,18838,18847,18805,18800,18852,18825,18825,18834,18853,18833,18833,18833,18860,18849,18849,18845,18837,18843,18800,18825,18846,18825,18816,18833,18835,18833,18814,18839,18813,18823,18834,18823,18814,18813,18835,18814,18822,18822,18822,18822,18822,18822,18822,18822,18822,18822,18822,18822,18822,18867,18868,18869,18836,18823,18870,18872,18871</RuleIDCache>
		</LogInspectionRule>
		<LogInspectionRule doNotMerge="true" id="29">
			<TBUID>8F16B937-0339-84CA-F66B-5237E83EFCC3</TBUID>
			<Name>Remote Access Service - Microsoft Windows RAS Events</Name>
			<Description>Inspect the Windows event logs of Remote Access Service (RAS).

Platform: Microsoft Windows</Description>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>63780BA6-0BA2-EA4F-1A46-EA51B6891214,D792378A-63A8-9AC6-3721-B6BA264918CF</RequiresTBUIDs>
			<UserEdited>false</UserEdited>
			<Alert>false</Alert>
			<AlertMinSeverity>4</AlertMinSeverity>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>1</RecommendationsMode>
			<RuleIDCache>85704,85705,85706,85707,85708,85709,85710,85711,85712,85714</RuleIDCache>
		</LogInspectionRule>
		<LogInspectionRule doNotMerge="true" id="61">
			<TBUID>2720CA0C-0DB6-E92B-60E9-5A3A3C885A4F</TBUID>
			<Name>Microsoft PowerShell Command Execution</Name>
			<Description>To detect Microsoft PowerShell command execution in Windows.</Description>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>63780BA6-0BA2-EA4F-1A46-EA51B6891214,D792378A-63A8-9AC6-3721-B6BA264918CF</RequiresTBUIDs>
			<UserEdited>false</UserEdited>
			<Alert>false</Alert>
			<AlertMinSeverity>4</AlertMinSeverity>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<RuleIDCache>19830,19831,19834,19835,19838,19839,19840,19841,19842,19843,19844,19845,19846,19847,19848,19849,19850,19869,19851,19852,19853,19855,19856,19857,19868,19858,19859,19860,19871,19861,19862,19863,19864,19867,19866,19865,19873,19870</RuleIDCache>
		</LogInspectionRule>
		<LogInspectionRule doNotMerge="true" id="30">
			<TBUID>FB03A859-012E-85CF-68A1-5A029C1AAC94</TBUID>
			<Name>Routing and Remote Access - Microsoft Windows RRAS Events</Name>
			<Description>Inspect the Windows event logs of Routing and Remote Access Server (RRAS).

Platform: Microsoft Windows</Description>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>63780BA6-0BA2-EA4F-1A46-EA51B6891214,D792378A-63A8-9AC6-3721-B6BA264918CF</RequiresTBUIDs>
			<UserEdited>false</UserEdited>
			<Alert>false</Alert>
			<AlertMinSeverity>4</AlertMinSeverity>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>1</RecommendationsMode>
			<RuleIDCache>85651,85652,85653,85654,85655,85656,85657,85658,85659,85660,85661,85662,85663,85664,85665,85666,85667,85668,85669,85670,85671,85672,85673,85674,85675,85676,85677,85678,85679,85680,85681,85682,85683,85684,85685,85686,85687,85688,85689,85690,85691</RuleIDCache>
		</LogInspectionRule>
		<LogInspectionRule doNotMerge="true" id="62">
			<TBUID>FA0B5EE9-B46A-D7E9-6DBD-C6CEA8E24587</TBUID>
			<Name>Microsoft Windows Sysmon Events - 2</Name>
			<Description>This Log Inspection rule monitors the events generated by System Monitor (Sysmon). It is a Windows system service and device driver that, once installed on a system, remains resident across system reboots to monitor and log system activity to the Windows event log and provides detailed information about process creations, network connections, and changes to file creation time.</Description>
			<MinimumAgentVersion>12.0.0.0</MinimumAgentVersion>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>D792378A-63A8-9AC6-3721-B6BA264918CF,63780BA6-0BA2-EA4F-1A46-EA51B6891214</RequiresTBUIDs>
			<UserEdited>false</UserEdited>
			<Alert>false</Alert>
			<AlertMinSeverity>4</AlertMinSeverity>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<RuleIDCache>18921,18917,18902,18902,18905,18909,18909,18909,18910,18905,18916,18900,18914,18905,18911,18912,18916,18903,18922,18908,18908,18902,18923,18901,18918,18918,18913,18924,18900,18907,18925,18926,18927,18928,18929,18930,18931,18932,18933,18934,18934,18934,18934,18934,18934,18934,18934,18934,18934,18934,18934,18934,18934,18935,18935,18935,18935</RuleIDCache>
		</LogInspectionRule>
		<LogInspectionRule doNotMerge="true" id="31">
			<TBUID>731A7D5F-F50E-90EB-768C-B0B2DF285C1F</TBUID>
			<Name>Terminal Server Security - Microsoft Windows</Name>
			<Description>Inspect Windows Terminal Server Events.

Platform: Microsoft Windows</Description>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>63780BA6-0BA2-EA4F-1A46-EA51B6891214,D792378A-63A8-9AC6-3721-B6BA264918CF</RequiresTBUIDs>
			<UserEdited>false</UserEdited>
			<Alert>false</Alert>
			<AlertMinSeverity>4</AlertMinSeverity>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>1</RecommendationsMode>
			<RuleIDCache>85403,85404</RuleIDCache>
		</LogInspectionRule>
		<LogInspectionRule doNotMerge="true" id="63">
			<TBUID>684A9446-71F7-575D-FE78-D88998CC3B60</TBUID>
			<Name>Microsoft Windows Management Instrumentation Events</Name>
			<Description>This rule monitors selected WMI events for malicious activity.</Description>
			<MinimumAgentVersion>6.0.0.0</MinimumAgentVersion>
			<MinimumManagerVersion>6.0.0</MinimumManagerVersion>
			<RequiresConfiguration>false</RequiresConfiguration>
			<RequiresTBUIDs>63780BA6-0BA2-EA4F-1A46-EA51B6891214,D792378A-63A8-9AC6-3721-B6BA264918CF</RequiresTBUIDs>
			<UserEdited>false</UserEdited>
			<Alert>false</Alert>
			<AlertMinSeverity>4</AlertMinSeverity>
			<DependedOn>false</DependedOn>
			<RecommendationsMode>-1</RecommendationsMode>
			<RuleIDCache>18950,18951,18951,18951,18951,18951,18951,18951,18952,18952,18952</RuleIDCache>
		</LogInspectionRule>
	</LogInspectionRules>
	<LogInspectionRuleOverrides>
		<LogInspectionRuleOverride id="1">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Alert>true</Alert>
			<AlertMinSeverity>5</AlertMinSeverity>
			<OverrideMetadata>false</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
		</LogInspectionRuleOverride>
		<LogInspectionRuleOverride id="2">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleID>29</LogInspectionRuleID>
			<Alert>true</Alert>
			<AlertMinSeverity>5</AlertMinSeverity>
			<OverrideMetadata>false</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
		</LogInspectionRuleOverride>
		<LogInspectionRuleOverride id="3">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleID>63</LogInspectionRuleID>
			<Alert>true</Alert>
			<AlertMinSeverity>5</AlertMinSeverity>
			<OverrideMetadata>false</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
		</LogInspectionRuleOverride>
		<LogInspectionRuleOverride id="4">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Alert>true</Alert>
			<AlertMinSeverity>5</AlertMinSeverity>
			<OverrideMetadata>false</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
		</LogInspectionRuleOverride>
		<LogInspectionRuleOverride id="5">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleID>62</LogInspectionRuleID>
			<Alert>true</Alert>
			<AlertMinSeverity>5</AlertMinSeverity>
			<OverrideMetadata>false</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
		</LogInspectionRuleOverride>
		<LogInspectionRuleOverride id="6">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Alert>true</Alert>
			<AlertMinSeverity>5</AlertMinSeverity>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
		</LogInspectionRuleOverride>
		<LogInspectionRuleOverride id="7">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Alert>true</Alert>
			<AlertMinSeverity>5</AlertMinSeverity>
			<OverrideMetadata>true</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
		</LogInspectionRuleOverride>
		<LogInspectionRuleOverride id="8">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Alert>true</Alert>
			<AlertMinSeverity>5</AlertMinSeverity>
			<OverrideMetadata>false</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
		</LogInspectionRuleOverride>
		<LogInspectionRuleOverride id="9">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Alert>true</Alert>
			<AlertMinSeverity>5</AlertMinSeverity>
			<OverrideMetadata>false</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
		</LogInspectionRuleOverride>
		<LogInspectionRuleOverride id="10">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Alert>true</Alert>
			<AlertMinSeverity>5</AlertMinSeverity>
			<OverrideMetadata>false</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
		</LogInspectionRuleOverride>
		<LogInspectionRuleOverride id="11">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Alert>true</Alert>
			<AlertMinSeverity>5</AlertMinSeverity>
			<OverrideMetadata>false</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
		</LogInspectionRuleOverride>
		<LogInspectionRuleOverride id="12">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Alert>true</Alert>
			<AlertMinSeverity>5</AlertMinSeverity>
			<OverrideMetadata>false</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
		</LogInspectionRuleOverride>
		<LogInspectionRuleOverride id="13">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Alert>true</Alert>
			<AlertMinSeverity>5</AlertMinSeverity>
			<OverrideMetadata>false</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
		</LogInspectionRuleOverride>
		<LogInspectionRuleOverride id="14">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleID>31</LogInspectionRuleID>
			<Alert>true</Alert>
			<AlertMinSeverity>5</AlertMinSeverity>
			<OverrideMetadata>false</OverrideMetadata>
			<RecommendationsMode isNull="true"/>
		</LogInspectionRuleOverride>
	</LogInspectionRuleOverrides>
	<LogInspectionRuleMetadatas>
		<LogInspectionRuleMetadata doNotMerge="true" id="1138">
			<TBUID>5A4CCBC5-A891-EBC1-6990-535EBEF8EAF0</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18254</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1153">
			<TBUID>79543DAD-6706-0F95-D9CC-2FD55795A01B</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814008</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1154">
			<TBUID>6E4FB08A-056D-1451-3FBA-47EAC5ECEFC4</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814009</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1155">
			<TBUID>BC406F87-8AAE-C001-B77E-F0A811C747E7</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814010</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1156">
			<TBUID>C17F8213-C7A4-6536-7E8A-C75A1EF6605E</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814011</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1157">
			<TBUID>372BD94B-C531-4A76-998F-5666677CF34C</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814012</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1158">
			<TBUID>73B1CA22-8FE6-C061-9045-225A46EFCCBC</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814013</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1159">
			<TBUID>830CC23B-2396-EAFD-DA2A-2870441F6A87</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814014</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1160">
			<TBUID>1B670424-FF17-1522-0234-D5245D055EB9</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814015</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1161">
			<TBUID>C786E273-B276-404E-5286-0A6B045347A1</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814016</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1162">
			<TBUID>BE1749A8-F44A-8346-05D5-01A5B5FE74CD</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814017</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1163">
			<TBUID>84A560CE-BCCC-0888-AFA6-9785762D64EE</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814018</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1164">
			<TBUID>B8BF9588-1ABD-A606-E8A6-095DFACEEC29</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814019</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1165">
			<TBUID>13BFB827-DA9E-6E3B-C0D2-941346B03468</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814020</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1166">
			<TBUID>5E00212F-8B58-4605-ED6E-2C42880BC426</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814021</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1167">
			<TBUID>121268B7-09DB-6D95-AD4F-DCA3670318FE</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814022</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1168">
			<TBUID>7595EDE6-0393-B5D9-2A3F-822377E9632B</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814023</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1169">
			<TBUID>67507370-E900-AB5F-D8A5-58C54EA8F4A2</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814024</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1170">
			<TBUID>9F8F64AB-06D4-AEFA-1B38-C8A1C5A292C5</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814025</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1171">
			<TBUID>2078C27C-3F88-0C28-33BF-86C64C17BB6E</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814026</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1172">
			<TBUID>8ED90314-D3B7-F08B-D336-DF3F44701954</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814027</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1173">
			<TBUID>D3CFF0D3-E8DC-4998-17CA-A25FDABA6C00</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814028</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1174">
			<TBUID>D777380C-6E8F-E8C6-363A-ADB0C3C225F1</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814029</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1175">
			<TBUID>749840B6-C58D-F105-F2BB-99AD5D04B0EC</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814030</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1176">
			<TBUID>17C73BDD-08CD-17F9-76DA-11342B4CDC92</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814031</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1177">
			<TBUID>22268223-D0C9-9907-1A17-FF1497E8A54A</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814032</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1178">
			<TBUID>5F3C555B-CFA6-403C-D4F3-32C01BA9267A</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814033</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1179">
			<TBUID>E4D0127F-A3B3-632C-B434-202284A23E2A</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814034</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1180">
			<TBUID>05B2ABC5-BCEE-DEFE-B3B0-43AC5EE7BC5B</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814035</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1181">
			<TBUID>56E8D303-F7ED-8851-50B9-D50C23CFDA3F</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814036</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1182">
			<TBUID>B7B6598B-2A34-7A8A-4B31-46F68183AFFD</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814037</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1183">
			<TBUID>5DE2D598-189C-B66B-AF8E-BF8AA6494AFD</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814038</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1184">
			<TBUID>C1C0E86F-B421-6C1E-2546-AAE5D9096FAA</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814039</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1185">
			<TBUID>22DE35B9-E231-E821-075F-59B446879042</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814040</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1186">
			<TBUID>E04C4E9D-23F8-13EC-FE0B-7E5DB149BD1A</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814041</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1187">
			<TBUID>00F721B9-D40A-366E-E685-DCE53AD6564E</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814042</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1188">
			<TBUID>7227961C-0DCC-FC8C-39CF-CD9D2AC80CB4</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814043</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1189">
			<TBUID>E7DB35A4-B409-A594-5EA5-435418FC2154</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814044</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1190">
			<TBUID>FF092D47-41A6-8C46-16A5-1AD9CB9BEB13</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814045</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1191">
			<TBUID>DC972F1B-B8B8-7DB0-C66B-9351A330E259</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814046</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1192">
			<TBUID>D0A8F4D7-10DA-91EA-A351-D7930A30BE46</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814047</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1193">
			<TBUID>72F90887-DE1C-BA06-9765-DCDDAC4B840F</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>LogFiles</Name>
			<Value>Application,Security,System</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1194">
			<TBUID>85C43C55-5167-01F7-C699-55B21BD09F8E</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>LogType</Name>
			<Value>eventlog</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1195">
			<TBUID>CC7B0F5F-64E4-2AA4-E1DF-66CEC61F3459</TBUID>
			<Version>3</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814048</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1196">
			<TBUID>7BFD78BF-A3DD-B22C-9BEF-DDEEC44CCDF2</TBUID>
			<Version>6</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814000</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1197">
			<TBUID>4F70AFD2-AAA0-40BC-2923-23810BB09ADA</TBUID>
			<Version>6</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814001</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1198">
			<TBUID>4F130091-99AD-E0B2-F7F3-5AF64A47211E</TBUID>
			<Version>6</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814002</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1199">
			<TBUID>86001436-966C-C070-FE77-A6FDEFC22E76</TBUID>
			<Version>6</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814003</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1200">
			<TBUID>C7422418-2C03-A289-B9B1-4F39D2354168</TBUID>
			<Version>6</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814004</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1201">
			<TBUID>7779FE62-0C83-EA4F-AC51-80C9A202C072</TBUID>
			<Version>6</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814005</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1202">
			<TBUID>A01D6839-5250-7A15-8179-08D65DD9F4CE</TBUID>
			<Version>6</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814006</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1203">
			<TBUID>1C83C038-5362-29AA-D0A1-8C5A1699B05A</TBUID>
			<Version>6</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814007</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1204">
			<TBUID>0EAB8FDA-CEB2-2F95-C482-293A377BF580</TBUID>
			<Version>23</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>LogFiles</Name>
			<Value>Security,System,Application</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1205">
			<TBUID>F486E240-8B71-1C26-F8A5-A88A42A65C3B</TBUID>
			<Version>23</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>LogType</Name>
			<Value>eventlog</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1206">
			<TBUID>A897D00F-1867-5050-B6A3-5BD815D53183</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18202</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1207">
			<TBUID>3C53C2E8-6DBA-ED07-D78C-5142746AAFC6</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18201</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1208">
			<TBUID>3A377DBA-A73F-93A5-2417-0D7BC33498CA</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18204</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1209">
			<TBUID>7EB87C80-5A7F-97A9-4002-08310BB74B67</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18203</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1210">
			<TBUID>C8D780AE-FDF4-D321-6530-0D7CD0CF8AB7</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18206</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1211">
			<TBUID>26264CA1-843E-48AB-0E66-90BC8106FF76</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18205</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1212">
			<TBUID>1FC8044A-353D-23F9-B54C-559E8D4B715D</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18208</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1213">
			<TBUID>9EB50E58-DBD9-2760-BF75-06A3A8C99BD0</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18207</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1214">
			<TBUID>03C4B61E-EC9A-0318-144F-4DD91BBF7126</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18245</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1215">
			<TBUID>A8B910F8-3C29-1B39-CC57-F145E39B5ABC</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18209</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1216">
			<TBUID>73B58BDC-17EC-CB29-07C7-28E45ABCDFC4</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18246</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1217">
			<TBUID>F37E8302-4CE2-DC19-CAC8-ED7DD4CC4C2F</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18247</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1218">
			<TBUID>EA9AB9EC-C4E6-A491-F8BF-FB0D43B840B4</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18248</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1219">
			<TBUID>AF42C06A-799D-C732-F3AF-51A2D09F57A1</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18249</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1220">
			<TBUID>8A585EDB-AA3B-4597-1076-0DA0A3E51A68</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18251</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1221">
			<TBUID>DB29AF6F-8FE3-5F97-5474-8B7F11544014</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18250</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1222">
			<TBUID>D0FBF454-C8F9-C295-6CBF-735CC77C9CEC</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18210</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1223">
			<TBUID>BC331C05-B3A3-D746-DAEA-529DB38686BB</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18211</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1224">
			<TBUID>A1EF6F4A-AC71-4FC2-31F6-9D9423C1BCA0</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18215</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1225">
			<TBUID>ED2DB18A-9A23-696A-CB05-86BB040C3C5D</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18214</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1226">
			<TBUID>ECAAA14F-3EF2-C131-AA72-A38AC4AAC161</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18213</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1227">
			<TBUID>7C4C3F85-DA68-5A9A-25F3-63F11BB75FE9</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18212</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1228">
			<TBUID>821CFF50-4563-D9DC-6A90-84D0713682CF</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18219</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1229">
			<TBUID>557E81CD-740A-1E22-59D8-1096CB866012</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18218</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1230">
			<TBUID>EEF0FA24-28D3-FF6C-9E60-B618EB62A852</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18217</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1231">
			<TBUID>ABC6CB09-DBC9-A645-F926-A50C44F37945</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18216</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1232">
			<TBUID>C3EF8456-C8DE-3A47-39C2-77970B15016F</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18221</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1233">
			<TBUID>C88D75E1-05E6-FDF0-FBCE-7F4F7483F336</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18222</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1234">
			<TBUID>8C1B8A3B-2FED-3736-2394-F1DB2DE2F022</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18220</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1235">
			<TBUID>17AE949E-D5AA-D0C7-AE76-A39B453D0D2B</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18227</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1236">
			<TBUID>01DC23CC-A9D0-5EDD-B8AA-22400DEC32CE</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18228</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1237">
			<TBUID>B6D117DC-3FF0-6165-04DC-F8F2623726E8</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18229</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1238">
			<TBUID>51F4AEA5-E311-AFE7-554F-ECC2EA0FA864</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18223</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1239">
			<TBUID>94E2A11B-4396-7726-B516-EBE3E9F07C6B</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18224</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1240">
			<TBUID>6039EAA2-84B5-DF8B-EC2C-F4475885E591</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18225</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1241">
			<TBUID>00F34264-17F6-A7AC-7DAA-55D9384D584B</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18226</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1242">
			<TBUID>06559AE7-8306-609A-5B77-C0B7C4DD3494</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18231</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1243">
			<TBUID>322F92B6-AE3E-2041-599C-739018B89711</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18230</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1244">
			<TBUID>24302A0A-71E3-E908-A8F9-E358A0801A46</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18233</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1245">
			<TBUID>193F2E02-EC17-533A-B7BB-311B9FA38025</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18232</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1246">
			<TBUID>A1BD65F9-D004-0E5A-D496-7224D2F829BC</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18238</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1247">
			<TBUID>CC652E45-5A17-F0B8-4D93-4C24D7080754</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18239</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1248">
			<TBUID>DFABB6CF-9003-0DD9-2802-0CBC1AAD2333</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18236</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1249">
			<TBUID>BD5C42EC-D317-AB07-A1AC-42DBBA140087</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18237</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1250">
			<TBUID>1C9B080B-618F-8D8F-3B1F-E2F148B3249C</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18234</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1251">
			<TBUID>C98B98CC-87B7-3327-AF3B-6E1D39CA756B</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18235</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1252">
			<TBUID>BFB95DEE-7995-BC87-D76A-82AC23C534EB</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18244</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1253">
			<TBUID>BE71B75D-AB70-E8BB-94D6-6F24DD76CB6E</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18243</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1254">
			<TBUID>71509877-895F-1685-734B-41FD5799A4F2</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18242</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1255">
			<TBUID>33DF56F3-DF25-78ED-3B67-64A856136C94</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18241</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1256">
			<TBUID>1DF174AD-5E09-5E83-CEFD-6E2BDC02B75B</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18240</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1257">
			<TBUID>2FD54206-6675-5E93-C605-7EDE44B1B759</TBUID>
			<Version>22</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18200</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1258">
			<TBUID>E663314D-3E73-FAF4-86E3-C34E5C641283</TBUID>
			<Version>12</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18256</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1259">
			<TBUID>3C350682-B041-7F4D-21AA-4A1D20B736D6</TBUID>
			<Version>10</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18252</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1260">
			<TBUID>2B48F1E0-23DC-CBED-78F6-838FB3C61C8F</TBUID>
			<Version>9</Version>
			<LogInspectionRuleID>47</LogInspectionRuleID>
			<Name>l18253</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1261">
			<TBUID>C9CE593B-C6F1-5D80-C2B8-09F4A4BC91B3</TBUID>
			<Version>21</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>LogFiles</Name>
			<Value>Application,System,Security</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1262">
			<TBUID>CFE5315C-EDA7-DF5B-6B66-B6529A15DAB4</TBUID>
			<Version>21</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>LogType</Name>
			<Value>eventlog</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1263">
			<TBUID>CE5FA93A-BD14-BC16-75A3-47D9B37668AE</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18419</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1264">
			<TBUID>36D4655E-8EB2-6B75-D428-72C1CDA47554</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18418</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1265">
			<TBUID>54A7BAEC-251F-CF10-3B91-6BE0B5E46EE5</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18413</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1266">
			<TBUID>9D0CCFDE-8105-CD2A-BDCE-850838675E49</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18412</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1267">
			<TBUID>DE82AE3F-C728-FF33-6727-CA0F980412DE</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18411</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1268">
			<TBUID>1A295289-DEAD-CB3B-0F02-61CB0D2E6476</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18410</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1269">
			<TBUID>4359815D-F391-33DD-3723-A8AA618A9C44</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18417</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1270">
			<TBUID>023C078C-DA27-DC56-4777-6C07EC15891E</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18416</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1271">
			<TBUID>CE17587B-CA58-4EF2-E414-FDDA9333253A</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18415</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1272">
			<TBUID>2BFA0DA4-FEAB-95A4-AAC9-73C30109B922</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18414</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1273">
			<TBUID>9196CF1E-D011-15B3-E6FB-76A1F9016FFC</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18436</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1274">
			<TBUID>25C9E1BA-EBE6-2F5C-8F01-5792ACAA72D5</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18437</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1275">
			<TBUID>3EBE43B5-E9FC-E5BF-33ED-CD49C2CC0273</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18432</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1276">
			<TBUID>A56D975D-0B11-7688-788B-80CD084C48BF</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18433</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1277">
			<TBUID>FCECDF39-4661-4846-2A4D-0A5CD611B498</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18420</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1278">
			<TBUID>D8781BD7-648F-9D44-59A4-653F8F180580</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18434</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1279">
			<TBUID>2C5CE9EF-39BF-7FD7-F0ED-4FC85A76B103</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18435</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1280">
			<TBUID>3F49560E-C88C-294E-7B99-E971836C1209</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18408</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1281">
			<TBUID>B4610B79-6DA4-ADE9-A68E-FD95F64D2686</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18409</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1282">
			<TBUID>F2C141BE-2CA9-9F57-3D1E-C8F7BDA05A0C</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18431</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1283">
			<TBUID>0ECC96A8-382F-505D-C37E-E71411E84FD8</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18400</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1284">
			<TBUID>01D31148-6E8B-C0C3-4F03-D9FE94986782</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18430</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1285">
			<TBUID>25D25494-5BC0-4870-C563-8E9F2F292EC9</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18402</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1286">
			<TBUID>CF7AF4AA-8F71-EE93-CDE0-0AF414B2B6CA</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18401</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1287">
			<TBUID>A22C6973-606D-9876-F9FA-EA9A5E15A273</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18404</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1288">
			<TBUID>F0FBD37B-C1A8-FF52-4414-F6566308F83B</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18403</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1289">
			<TBUID>1BE1359D-009E-D6D2-B114-94908F08E5CE</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18406</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1290">
			<TBUID>002E7C3A-93FB-36DC-3474-C97C8E25C885</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18405</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1291">
			<TBUID>0F115260-C3F7-4EAD-550A-D844C1A31BC6</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18427</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1292">
			<TBUID>4679D699-CB0B-9BCA-F8A4-8EB8B468E861</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18428</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1293">
			<TBUID>47D144DD-C65C-A451-588B-0CA828490D5F</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18425</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1294">
			<TBUID>EAFD1D65-E8C1-53C8-5FB3-ABB4823A82BF</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18426</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1295">
			<TBUID>ABDF4A52-E143-6BB4-9E38-6299680FB967</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18423</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1296">
			<TBUID>932AA546-F287-8A9D-3A77-9BB3654B9FC8</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18424</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1297">
			<TBUID>4A83D24D-4BFD-6A1C-73C2-16472FC66226</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18421</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1298">
			<TBUID>507FE567-BD6B-A9E0-E413-11A640D347D9</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18422</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1299">
			<TBUID>D6275FFC-4151-52DA-4506-CDEE221C15C3</TBUID>
			<Version>20</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18429</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1300">
			<TBUID>B44BCFEF-BA06-1214-9D68-3D185504CA9A</TBUID>
			<Version>13</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18438</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1301">
			<TBUID>E56C5CB6-694D-4A2E-6590-66204EC8E0D5</TBUID>
			<Version>19</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18407</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1302">
			<TBUID>107A0596-9759-65DC-A692-103513805488</TBUID>
			<Version>2</Version>
			<LogInspectionRuleID>48</LogInspectionRuleID>
			<Name>l18439</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1344">
			<TBUID>27827489-A9AB-0A02-F5C3-A21E2DA3C6EC</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18366</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1345">
			<TBUID>299A8DF8-F541-4A6C-EC71-ED2B37F8F767</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18367</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1346">
			<TBUID>E060C6D2-8794-ACF5-C8D3-263854A4DA8A</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18368</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1347">
			<TBUID>810E5A15-59DA-D497-930E-39626DFC2CCE</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18369</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1348">
			<TBUID>74A04BF4-6403-4B7D-35E0-A513DBAA1658</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18323</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1349">
			<TBUID>8F88B2D9-C127-0B3A-A1DF-3B2844A50389</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18322</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1350">
			<TBUID>31633346-66DB-39B9-0B43-8CCE4E5949E0</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18325</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1351">
			<TBUID>8CBCDBA5-018E-C9C2-BDFD-3CD9897B1E39</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18324</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1352">
			<TBUID>7EE0CC1C-5183-7158-8995-D3A7200F4B36</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18326</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1353">
			<TBUID>8DCEA381-EAA3-6231-F320-C1189618D354</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18329</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1354">
			<TBUID>1DDCBC18-BE58-EC92-4E17-CBCDF316E082</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18330</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1355">
			<TBUID>0434580C-7798-E130-1CA2-623C0FA7CAE2</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18331</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1356">
			<TBUID>97F0DE53-73EA-79E5-43C2-6906AB120CB8</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18332</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1357">
			<TBUID>0C0980E9-723E-D3CA-48A3-B5E27E4FE392</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18370</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1358">
			<TBUID>BA547CE2-B4C2-5CAA-902D-181FE8906932</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18371</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1359">
			<TBUID>959A5AB8-408A-4511-C8FB-8188C074164B</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18374</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1360">
			<TBUID>EF35CC55-F9F5-DC7F-C56F-5EA76BFDF70C</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18373</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1361">
			<TBUID>DE81A838-00D7-5701-5704-AAE27E5B3072</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18376</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1362">
			<TBUID>C52648AF-857B-EFED-4FD6-22BF839BA697</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18375</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1363">
			<TBUID>5C8F4CE6-5A23-B23E-9228-AAC017E6A9DD</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18379</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1364">
			<TBUID>B3C49CC9-B327-B512-6381-D44F0E8D028F</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18377</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1365">
			<TBUID>7584B75B-0344-68A2-3CE9-FCB52C3928B5</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18378</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1366">
			<TBUID>176A67D5-B260-FC21-2029-C2DB84E331DC</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18336</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1367">
			<TBUID>02582848-2378-D982-4188-1D58B6138F3D</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18335</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1368">
			<TBUID>7AFF1205-9A41-FF4B-86D9-B589109C8112</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18334</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1369">
			<TBUID>0DFEBF26-1DA3-7748-B5A0-57894FC60778</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18333</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1370">
			<TBUID>6D40256C-7900-AAE6-DD97-F702A9772AD9</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18339</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1371">
			<TBUID>255B783C-C141-3FE8-EC12-17425147800F</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18338</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1372">
			<TBUID>93138DF5-3759-A074-524A-D6BC7E0690D5</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18337</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1373">
			<TBUID>4780F08E-0B33-2D6F-B0D7-FC636E486B84</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18342</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1374">
			<TBUID>0A48FCC4-C0E1-4725-3E71-6D7CE5A62AC1</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18343</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1375">
			<TBUID>D79682C3-3B85-749F-49B9-658044A658A5</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18340</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1376">
			<TBUID>2F82A826-0957-B992-4E45-F285DC13399A</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18341</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1377">
			<TBUID>F76A5563-3A36-EB69-B4ED-72B2A7B70061</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18383</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1378">
			<TBUID>4D42984F-BD27-373A-D8C6-E9CA898F5E01</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18382</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1379">
			<TBUID>37626E71-27D7-A7DB-E07A-755A63C9259B</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18381</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1380">
			<TBUID>3C62912F-DD8B-6C38-2968-884D4E6EF7C1</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18380</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1381">
			<TBUID>A44EC445-0228-5136-88A0-D617532BEE0E</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18387</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="358">
			<TBUID>5D7BA2F9-23DD-81B7-E674-D559D5E1D65E</TBUID>
			<Version>3</Version>
			<LogInspectionRuleID>20</LogInspectionRuleID>
			<Name>l6</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1382">
			<TBUID>BDB79C12-6D4F-B94B-ACAE-0BAA63BF865D</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18386</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="359">
			<TBUID>98CF5406-D76D-852D-A72F-E0AC0090BD0B</TBUID>
			<Version>3</Version>
			<LogInspectionRuleID>20</LogInspectionRuleID>
			<Name>l7</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1383">
			<TBUID>D6FC623A-6BA4-21A0-827C-8FCFF8C55F3B</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18385</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="360">
			<TBUID>A5D6D483-D676-3B5A-D1BC-83D9DF816DDF</TBUID>
			<Version>3</Version>
			<LogInspectionRuleID>20</LogInspectionRuleID>
			<Name>l4</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1384">
			<TBUID>AA580AE2-6124-4B9C-0E06-5FF09617C124</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18384</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="361">
			<TBUID>86DD5C2F-240A-5E74-1DA4-2831B067D256</TBUID>
			<Version>3</Version>
			<LogInspectionRuleID>20</LogInspectionRuleID>
			<Name>l5</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1385">
			<TBUID>6D3C8115-654E-52B1-15BC-68F2D8B621E5</TBUID>
			<Version>19</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>LogFiles</Name>
			<Value>Application,System,Security</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="362">
			<TBUID>1FA16CF1-5433-0DC2-6635-C34206A0FB83</TBUID>
			<Version>3</Version>
			<LogInspectionRuleID>20</LogInspectionRuleID>
			<Name>l2</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1386">
			<TBUID>B97E0B09-BDBC-ACAE-7D28-59FEBA60DC7C</TBUID>
			<Version>19</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>LogType</Name>
			<Value>eventlog</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="363">
			<TBUID>D35F368B-5655-595E-8CA8-D1F6B273F9DC</TBUID>
			<Version>3</Version>
			<LogInspectionRuleID>20</LogInspectionRuleID>
			<Name>l3</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1387">
			<TBUID>EB5EB45A-E6D3-73CC-A890-A5DC38454FA6</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18348</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="364">
			<TBUID>EFFE4360-B889-4544-BFFF-641C00A10C59</TBUID>
			<Version>3</Version>
			<LogInspectionRuleID>20</LogInspectionRuleID>
			<Name>l1</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1388">
			<TBUID>1CAD2728-CFFA-77A3-9213-505ED073B0DF</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18349</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="365">
			<TBUID>70B9A313-C2C2-8DC5-7F9C-A0F42D5F105E</TBUID>
			<Version>2</Version>
			<LogInspectionRuleID>20</LogInspectionRuleID>
			<Name>l8</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1389">
			<TBUID>A99826BD-E900-0374-E76D-3D19D83292B5</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18309</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1390">
			<TBUID>21E9C21D-B6CC-A670-7AB1-88007A9F30FD</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18344</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1391">
			<TBUID>3C72FB24-7B70-AF04-DCAD-649BFB460526</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18308</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1392">
			<TBUID>1AE83A0C-5EB5-3FCA-6D4B-30C12D7F2370</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18345</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1393">
			<TBUID>D91AB51C-0A1A-FD0C-F226-4752518F687F</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18346</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1394">
			<TBUID>A2F013E0-4471-AD0C-2C4F-375F698BB90C</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18347</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1395">
			<TBUID>6CF3F631-E877-2446-2334-E751CD51DD0C</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18305</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1396">
			<TBUID>B395A324-2DE7-EFAB-BD9B-0654DC21F684</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18304</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1397">
			<TBUID>D51351A0-2AF3-D747-DAC7-03A38D8096C5</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18307</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1398">
			<TBUID>0CD69EED-62F4-F803-F476-3D5210D4812E</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18306</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1399">
			<TBUID>BF8AD869-9D8C-F819-D60D-504D88E4B7D0</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18301</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1400">
			<TBUID>BC333835-59B7-550E-B976-B34C9CA51AA4</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18300</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1401">
			<TBUID>DA78E023-C3AA-E647-1EE9-5CFA6A1FCFD5</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18303</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1402">
			<TBUID>B17C4C15-3C2E-F779-E416-FCD2C0A1E549</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18302</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1403">
			<TBUID>2EC1C193-B42D-0FFD-685E-9DA2C50DC7A1</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18310</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1404">
			<TBUID>CA83B561-4879-AC98-BCDE-B1F30AAC1478</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18352</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1405">
			<TBUID>B7D04BD7-8EF3-A993-9045-F1FE3F3DD897</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18351</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1406">
			<TBUID>8414D476-D7E2-1820-508A-E891F91400D7</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18354</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1407">
			<TBUID>E7128F0A-5E1F-07B0-43DA-3C7C8AF0B1A0</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18353</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1408">
			<TBUID>AEA56997-1629-D35A-4622-C05F3272EACA</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18350</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1409">
			<TBUID>3F382D23-F20D-2305-6FDB-7B1B6758B9A0</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18357</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1410">
			<TBUID>04320514-B000-4FBF-A1AB-C2BC80A77F16</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18358</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1411">
			<TBUID>5577A838-1D4E-48FE-577D-4C5239E6FB7D</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18355</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1412">
			<TBUID>D6029191-FC2F-615D-5698-2D879AE3AA0A</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18319</Name>
			<Value>6</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1413">
			<TBUID>EA449E8E-41B1-7AE4-6681-7227A35DBB81</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18318</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1414">
			<TBUID>BC3E919C-E563-A18B-B8AD-9A6FB9DCAE29</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18317</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1415">
			<TBUID>A6957FF0-0039-68F2-FEFA-537A6D626C56</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18316</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1416">
			<TBUID>B04B5925-0BFF-709D-EC4B-A59E02D21D6F</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18315</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1417">
			<TBUID>D1D0BED8-3777-F425-8868-46D0CC9A2E28</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18314</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1418">
			<TBUID>53651E9F-217A-B6D2-4CFC-53BA6F869380</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18313</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1419">
			<TBUID>144E50AC-8D93-EFE7-2F85-DF788DE6875F</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18312</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1420">
			<TBUID>DAE0429F-6584-D3FD-C9F5-6D7205238FA2</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18311</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1421">
			<TBUID>7AB2325C-F7C0-7547-A344-D32522C4B45A</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18320</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1422">
			<TBUID>A558A8FB-83F9-26FE-0396-4F72A94A4FA1</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18321</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1423">
			<TBUID>477F3B50-B641-0145-EC87-40E48DE43E30</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18365</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1424">
			<TBUID>A84E624F-37F3-EC8F-71FB-0737346DB9D3</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18364</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1425">
			<TBUID>5FF9A856-2A4F-0F36-E95F-5BA838DA0ABD</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18363</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1426">
			<TBUID>2697C04E-F897-A128-2BB4-FFD8CF8B97D2</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18362</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1427">
			<TBUID>C7B69166-EA21-79AC-ADC3-2942F09D55EA</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18361</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1428">
			<TBUID>F7C593DA-4B7B-AE07-2EB8-D43271970D23</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18360</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1429">
			<TBUID>350D59ED-F941-3B93-5055-CC886CEA4842</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18327</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1430">
			<TBUID>EFB0688E-277E-54CA-B54F-AE9C32AAB41E</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18328</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1431">
			<TBUID>815A8ACE-5643-CE07-B22E-EC13A2CB7D5E</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18372</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1432">
			<TBUID>6CD411E3-FE50-CFDE-58E2-F8C58D97DE1C</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18359</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1433">
			<TBUID>E8E3540F-651C-11EE-D468-B18AA280035A</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l18356</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="535">
			<TBUID>BC3C1C5A-7739-D59F-B9F8-6E6DAFC9524E</TBUID>
			<Version>10</Version>
			<LogInspectionRuleID>29</LogInspectionRuleID>
			<Name>LogFiles</Name>
			<Value>Security,System,Application</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="536">
			<TBUID>E66B93D1-5EFF-9799-99B3-AD2B720CAB2B</TBUID>
			<Version>10</Version>
			<LogInspectionRuleID>29</LogInspectionRuleID>
			<Name>LogType</Name>
			<Value>eventlog</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="537">
			<TBUID>95C303A2-E171-9907-8075-45E811BFB1BE</TBUID>
			<Version>9</Version>
			<LogInspectionRuleID>29</LogInspectionRuleID>
			<Name>l85700</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="538">
			<TBUID>81012C31-26F6-EA83-B908-8EDE442E6A33</TBUID>
			<Version>9</Version>
			<LogInspectionRuleID>29</LogInspectionRuleID>
			<Name>l85701</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="539">
			<TBUID>49D44002-32F4-03D6-DD0D-068DD275A4F9</TBUID>
			<Version>9</Version>
			<LogInspectionRuleID>29</LogInspectionRuleID>
			<Name>l85710</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="540">
			<TBUID>53982D91-894B-0DBA-FBDE-F628C5CF4FA8</TBUID>
			<Version>9</Version>
			<LogInspectionRuleID>29</LogInspectionRuleID>
			<Name>l85712</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="541">
			<TBUID>AA1A7B80-667E-076C-02E2-8669D9270AB4</TBUID>
			<Version>9</Version>
			<LogInspectionRuleID>29</LogInspectionRuleID>
			<Name>l85711</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="542">
			<TBUID>F9FD10D6-64FE-D053-C698-E60D915A15CB</TBUID>
			<Version>9</Version>
			<LogInspectionRuleID>29</LogInspectionRuleID>
			<Name>l85714</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="543">
			<TBUID>6F178027-3135-3F45-6635-27BE2D09EDDD</TBUID>
			<Version>9</Version>
			<LogInspectionRuleID>29</LogInspectionRuleID>
			<Name>l85705</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="544">
			<TBUID>92A9BB28-7467-89A6-90F6-8655C639631A</TBUID>
			<Version>9</Version>
			<LogInspectionRuleID>29</LogInspectionRuleID>
			<Name>l85704</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="545">
			<TBUID>AC485FFA-D5CA-4380-84F4-3C21BE991F36</TBUID>
			<Version>9</Version>
			<LogInspectionRuleID>29</LogInspectionRuleID>
			<Name>l85703</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="546">
			<TBUID>94D08D9C-FEC8-4EDF-3E14-5E949A437305</TBUID>
			<Version>9</Version>
			<LogInspectionRuleID>29</LogInspectionRuleID>
			<Name>l85702</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="547">
			<TBUID>77B126A6-A70F-A214-C0AA-A888B4042E5C</TBUID>
			<Version>9</Version>
			<LogInspectionRuleID>29</LogInspectionRuleID>
			<Name>l85709</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="548">
			<TBUID>344B506D-E558-ABED-7C30-E4B5A265C2F5</TBUID>
			<Version>9</Version>
			<LogInspectionRuleID>29</LogInspectionRuleID>
			<Name>l85708</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="549">
			<TBUID>5EFC60E2-3D60-7B85-65D7-09D396129538</TBUID>
			<Version>9</Version>
			<LogInspectionRuleID>29</LogInspectionRuleID>
			<Name>l85707</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="550">
			<TBUID>206A54B2-107A-BFFF-A936-BC0F526EFC8F</TBUID>
			<Version>9</Version>
			<LogInspectionRuleID>29</LogInspectionRuleID>
			<Name>l85706</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="551">
			<TBUID>FA463E75-BFEE-8016-3B3C-ADDADFCC0A6B</TBUID>
			<Version>9</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>LogFiles</Name>
			<Value>Security,System,Application</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="552">
			<TBUID>39804CF3-E0E0-8A79-6CE9-120CBCEA38D8</TBUID>
			<Version>9</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>LogType</Name>
			<Value>eventlog</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="553">
			<TBUID>4F7A9496-5054-360D-CB3A-12999500C0E6</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85669</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="554">
			<TBUID>E87E4FC2-F1C1-8F16-CEA2-DA578AB642BD</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85603</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="555">
			<TBUID>368F3B57-3E9D-B0D2-FDED-08943657A01E</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85601</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="556">
			<TBUID>3F2F8853-A036-532D-5726-B22ABDDBAAC2</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85665</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="557">
			<TBUID>182AF235-36BB-049A-9762-7571D0343CD0</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85602</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="558">
			<TBUID>187C7AFE-16F5-ED90-8172-B810A20AF1E1</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85666</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="559">
			<TBUID>B0D3D9D7-1447-8DC9-9929-FA167B04F313</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85667</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="560">
			<TBUID>5C155AFB-3585-58E5-6FB0-FF9E339BAE99</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85600</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="561">
			<TBUID>BC2DF903-52C4-28F1-5988-160FD6D1B729</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85668</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="562">
			<TBUID>ED386D50-5275-58CC-E246-FFDF87286BCB</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85680</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="563">
			<TBUID>1DEEDFC1-11A1-943A-DCD8-AD42CF3431AF</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85661</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="564">
			<TBUID>93573C7C-99B6-C8F0-4AB2-A330D5A19515</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85662</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="565">
			<TBUID>8FB139FF-8C75-5A1B-C4AB-B72DD1A282CC</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85682</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="566">
			<TBUID>6784ABE3-B8AF-A8B9-D898-06EAF865B3BB</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85663</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="567">
			<TBUID>66C161D1-9D87-E43E-7BC4-D6E4A126EB06</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85681</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="568">
			<TBUID>B75746D7-E61C-6A6B-089D-1C6AD8566147</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85664</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="569">
			<TBUID>55834BE7-9331-705E-03AF-6DDB7D0CBCA3</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85684</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="570">
			<TBUID>93890758-3172-7159-32B8-FA90951F688D</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85683</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="571">
			<TBUID>6A8E58CA-D4EE-78A8-C829-EE820E6139D9</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85686</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="572">
			<TBUID>7AC386FB-E9A7-F726-1D2A-978ED185085F</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85685</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="573">
			<TBUID>AC238D5D-415D-0AC5-F687-CAA9E03F5515</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85660</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="574">
			<TBUID>9116443A-7D75-CA9D-819F-56A931085DDF</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85688</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="575">
			<TBUID>495F5C03-A3D3-8517-7319-1724FE765BCB</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85687</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="576">
			<TBUID>BB3B8A25-9FE3-8014-79CD-30108C8D31F0</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85689</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="577">
			<TBUID>41271A2D-82A7-2AEC-86D3-7F7910338C1E</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85659</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="578">
			<TBUID>E04FDE03-64CD-ACC2-43BA-9439719FF1B2</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85658</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="579">
			<TBUID>36A1094D-9BF9-5532-DFA8-EC0CB1B77318</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85656</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="580">
			<TBUID>AD408AE9-1220-B738-A8B0-D25CA3129EB5</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85657</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="581">
			<TBUID>79AA7217-3C15-B201-18A3-AEE1D51957D4</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85691</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="582">
			<TBUID>878D7C15-2589-3673-28CA-F68A225B55D0</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85654</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="583">
			<TBUID>2F667C2D-52CD-9CD6-2175-104073D390A8</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85690</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="584">
			<TBUID>6DCD3F44-9249-7E3A-936F-679EBF8EE33C</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85655</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="585">
			<TBUID>C7FC1ACB-5CC2-FC12-1FBB-521307016FDA</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85652</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="586">
			<TBUID>2517A46C-608E-D4D0-0A2E-218C6620CA2A</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85671</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="587">
			<TBUID>C8C28212-8361-5CE2-DEC7-157ADE36F445</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85653</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="588">
			<TBUID>5FCC1595-E076-3B72-B377-5F241F2FD253</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85670</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="589">
			<TBUID>80512481-1494-A37F-ACA5-D06F2C27AE3E</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85651</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="590">
			<TBUID>5709747F-591E-88F1-7B9C-2A731F2C93F8</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85675</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="591">
			<TBUID>037488EF-C813-1741-13DE-F2DF9EA8D463</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85674</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="592">
			<TBUID>8657F654-75EC-148D-2A8C-C3011FFBB52F</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85673</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="593">
			<TBUID>83343FB1-6901-FDC8-EC4D-44824A911678</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85672</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="594">
			<TBUID>6E89F19B-0156-78FE-BFFA-0F58F1FAA35E</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85679</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="595">
			<TBUID>A43FBF55-772F-84C9-4220-57C759DE2D6B</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85678</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="596">
			<TBUID>E8364CB0-8AA6-3812-B4B0-BCC758BDE6C0</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85677</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="597">
			<TBUID>C3C85019-7142-83A7-3366-B217C34EC411</TBUID>
			<Version>8</Version>
			<LogInspectionRuleID>30</LogInspectionRuleID>
			<Name>l85676</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="598">
			<TBUID>119C4085-F5A5-9E54-35AA-4AAA46176E72</TBUID>
			<Version>6</Version>
			<LogInspectionRuleID>31</LogInspectionRuleID>
			<Name>LogFiles</Name>
			<Value>System</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="599">
			<TBUID>AB2C017F-6CB0-7703-26C0-C2447D191A73</TBUID>
			<Version>6</Version>
			<LogInspectionRuleID>31</LogInspectionRuleID>
			<Name>LogType</Name>
			<Value>eventlog</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="600">
			<TBUID>067D8BCC-B51E-AC00-EF5B-C00EF4A7CF1A</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>31</LogInspectionRuleID>
			<Name>l85400</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="601">
			<TBUID>47547CC4-2C66-D049-F3DD-3678BF53973C</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>31</LogInspectionRuleID>
			<Name>l85402</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="602">
			<TBUID>541F88B5-CE61-9344-7FF3-B6968BA5E8E5</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>31</LogInspectionRuleID>
			<Name>l85401</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="603">
			<TBUID>2E780A12-592D-8080-2DC2-136A8ECBB20E</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>31</LogInspectionRuleID>
			<Name>l85404</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="604">
			<TBUID>73333348-5D6F-788E-2194-A54CA7DADBF7</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>31</LogInspectionRuleID>
			<Name>l85403</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1667">
			<TBUID>D6389D97-2706-0839-0E45-7B21ED3615ED</TBUID>
			<Version>15</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904045</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1668">
			<TBUID>27685400-E9E5-49C7-3B4C-7617B8549311</TBUID>
			<Version>15</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904099</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1669">
			<TBUID>507ADD51-B22B-E421-1E19-3BF488B4C433</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>LogFiles</Name>
			<Value>Application,Security,System</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1670">
			<TBUID>169EDCE1-6251-B986-3537-3A059FDB0F95</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>LogType</Name>
			<Value>eventlog</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1671">
			<TBUID>DB1D43E1-67E0-0246-76A0-62B8C8F7FE05</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904002</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1672">
			<TBUID>B7A0AB29-7BB7-F89C-3135-B73E21A7A98D</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904003</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1673">
			<TBUID>C9CCEC18-E8F4-1B7A-09FB-6A1E248E047D</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904012</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1674">
			<TBUID>9441B311-0762-522A-6CED-D96B8C90573F</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904013</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1675">
			<TBUID>D880F9AA-4CAE-F434-C657-8FE7CD45BF60</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904014</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1676">
			<TBUID>5E9C9B37-0743-6C46-09B9-CE186D96C99A</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904015</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1677">
			<TBUID>36568456-4E90-2C8B-0BE2-7FEBA986EFC3</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904016</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1678">
			<TBUID>8E039129-CCCD-8358-2B1D-1E40FEDEA05E</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904018</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1679">
			<TBUID>282D42EA-72AE-1F7A-A007-A63C539FCC0B</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904022</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1680">
			<TBUID>BC76EDFA-FBC0-B36D-CDDB-17ADCCE89390</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904023</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1681">
			<TBUID>85CBF480-E587-6018-1C65-544BC53CA096</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904024</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1682">
			<TBUID>80814CB5-CA85-87A3-1E78-E570CCEBBBD1</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904025</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1683">
			<TBUID>C4E76CAB-46C8-2CA1-239E-1EE1E41BDAA5</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904026</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1684">
			<TBUID>E9174332-F379-2708-9226-DA893812A341</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904029</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1685">
			<TBUID>92BA1EDB-0281-0FD8-D268-6718E52C2FD3</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904030</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1686">
			<TBUID>D5D61B90-F54D-109A-B600-8F3B3B28CAC6</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904031</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1687">
			<TBUID>D3E71A81-D72E-AE33-0502-0A370C715FB6</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904032</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1688">
			<TBUID>D0D93D7B-E3D5-C477-6048-780E7C47925C</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904035</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1689">
			<TBUID>02A393CE-2811-2E6A-BE3D-716D83C68B46</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904036</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1690">
			<TBUID>74201A2B-5C8C-F887-EE7C-F4E8ED58DA1D</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904037</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1691">
			<TBUID>DB6274EB-086F-4131-497B-291B1FC76EE9</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904041</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1692">
			<TBUID>A8FDBF44-E1E4-8E34-7F56-FE10BC85D494</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904042</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1693">
			<TBUID>382842F4-D97F-B964-EA57-A93223BE2B21</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904043</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1694">
			<TBUID>FE258D16-4BB3-A982-ECC6-E701B3D89E38</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904044</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1695">
			<TBUID>326F948F-C1D6-D0F4-09D8-DBAE82D9E87B</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904046</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1696">
			<TBUID>5247C388-D52F-A596-CD65-4A3DB0395B19</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904047</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1697">
			<TBUID>24CA52AA-12CE-5952-E017-A176E8BFBE4B</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904048</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1698">
			<TBUID>86C1DE2D-848C-804D-FF68-37BB7B6432A7</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904049</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1699">
			<TBUID>4DEF97C7-D37B-85A4-8884-1346E72C89C2</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904050</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1700">
			<TBUID>53B94D01-214F-74D4-7156-3AA62903BB20</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904051</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1701">
			<TBUID>4A5DE482-0DC4-F6F5-1BD2-D670C7102C0E</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904052</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1702">
			<TBUID>3A5F30B4-67C7-5497-48FB-EF90068F325A</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904053</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1703">
			<TBUID>0C0E5343-A25E-11F6-515D-614FD8C1B1E4</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904054</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1704">
			<TBUID>AB70B1E2-34D5-2D98-3BCD-715C691C992D</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904055</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1705">
			<TBUID>CC4C3C45-1B78-53F1-6E59-E1677D0F6AF5</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904056</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1706">
			<TBUID>777FD303-2BD8-2EB8-E7B7-FC291BF6E090</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904057</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1707">
			<TBUID>AF2905B7-DD3C-5C40-1AD1-2937E0D72611</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904058</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1708">
			<TBUID>8CE3CD02-3A36-14B5-71AB-F6240378EC71</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904059</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1709">
			<TBUID>30A76F3A-A26B-D892-85FF-3809C1C472D3</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904060</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1710">
			<TBUID>5E9C5887-EA5C-1B15-B581-8388AE953C9C</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904061</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1711">
			<TBUID>0CF1C3B6-3448-9ACB-B600-BB5A0C0962BD</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904062</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1712">
			<TBUID>CFE7907F-B97B-CAC7-155A-E00D3F8A639F</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904070</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1713">
			<TBUID>6CA86B4F-26CF-085C-F4E4-12323CCC93EF</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904071</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1714">
			<TBUID>3C8CEE3D-3F66-EF67-D6FD-9A29DE2D673A</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904072</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1715">
			<TBUID>DC7F8F7F-FE91-6FEB-B68F-5D4776DD88C4</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904073</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1716">
			<TBUID>19A9418D-C20E-6D57-F99B-F8A78FD329C5</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904074</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1717">
			<TBUID>B0A296B7-4508-E1FC-4DBD-7EB381F350D3</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904075</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1718">
			<TBUID>C60CA7B8-54C7-DEE4-B219-6F6451EAE95A</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904076</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1719">
			<TBUID>87DEBECD-D5C2-D52A-B00A-D0B00E2DFA73</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904078</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1720">
			<TBUID>5356E593-C462-B5FB-6ACB-0E8A7D5D08EB</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904081</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1721">
			<TBUID>FAFCC3B2-6361-7D88-65BD-FFCC7C863FDE</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904082</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1722">
			<TBUID>A6344BD6-2DEB-DBFD-4310-E9BAB70E3F60</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904083</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1723">
			<TBUID>90B62CAD-68F4-0EA4-C37B-B69465CAEE2E</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904084</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1724">
			<TBUID>0A565C8E-70C4-D13B-D8C3-6DAB03FDDD30</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904085</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1725">
			<TBUID>7D5EABFC-9266-9016-F18A-D24C33D978A4</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904086</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1726">
			<TBUID>73C81490-0972-9A08-1500-39B4BCB2EB4D</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904087</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1727">
			<TBUID>E5F7E385-A90A-5449-21FF-184D73E6E627</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904088</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1728">
			<TBUID>CEE864B0-5B6C-A669-EFAA-D25232B695F2</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904089</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1729">
			<TBUID>48C56D6F-488E-C1CF-2C80-844181F1E06A</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904090</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1730">
			<TBUID>9B46275A-F747-F072-9C6D-86FBCABF97C3</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904091</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1731">
			<TBUID>F6AD84B9-DA32-BAFA-1BBE-43B792F3AB23</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904092</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1732">
			<TBUID>41E8546C-BD20-D89A-8495-D7ECFB584E32</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904093</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1733">
			<TBUID>B0A49067-F157-482D-0A3D-F5EFEEC4986D</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904094</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1734">
			<TBUID>DB9699DE-ED4C-4BB1-9011-E8AB4B33C610</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904095</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1735">
			<TBUID>0C3163A1-6D90-7C56-1A4F-61EB2D6C6D0D</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904096</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1736">
			<TBUID>61A26C23-87FA-0703-5A67-FD7E2353A881</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>f904075</Name>
			<Value>120</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1737">
			<TBUID>07DB008B-AA13-1A90-685C-52712D1B6BD5</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>f904076</Name>
			<Value>120</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1738">
			<TBUID>39A405A0-101F-219F-70C1-81AA27EAA64D</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>t904075</Name>
			<Value>10</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1739">
			<TBUID>4486263B-708E-6CB6-04E3-81003F65EC3C</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>t904076</Name>
			<Value>10</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1740">
			<TBUID>DFCE0EEB-3FC2-F8B8-3D35-1355D11D8256</TBUID>
			<Version>15</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904038</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1741">
			<TBUID>16309B51-C568-91D5-C685-BA165993F9CA</TBUID>
			<Version>15</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>f904038</Name>
			<Value>120</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1742">
			<TBUID>5358F733-C5DD-E8E6-8F02-F2890E0602F3</TBUID>
			<Version>15</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>t904038</Name>
			<Value>10</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1743">
			<TBUID>FBA4168D-C669-FD4D-EB60-A5665DF8DFB2</TBUID>
			<Version>15</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904007</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1744">
			<TBUID>EF4E465A-FB3D-F6AA-083F-19A073773C4F</TBUID>
			<Version>15</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904006</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1745">
			<TBUID>3B0AEAEF-FC50-6954-5513-B00C6DCD86FD</TBUID>
			<Version>6</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904004</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1746">
			<TBUID>7EA8701D-1F81-2A1C-7FC0-FD559F9CA4C5</TBUID>
			<Version>2</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>l904097</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1747">
			<TBUID>AA4B8671-7C2E-4FAC-578D-C1994A5D7BE3</TBUID>
			<Version>2</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>f904097</Name>
			<Value>5</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1748">
			<TBUID>6A8A3E06-943E-5016-03FC-C1EC7D707743</TBUID>
			<Version>2</Version>
			<LogInspectionRuleID>56</LogInspectionRuleID>
			<Name>t904097</Name>
			<Value>120</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1749">
			<TBUID>884488F9-2D60-0477-AF96-0B55C2A6BA2D</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>LogFiles</Name>
			<Value>System,Application,Security,Directory Service,File Replication Service</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1750">
			<TBUID>0B87EAB2-9EED-CC97-2C62-6D923A1D7EBF</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>LogType</Name>
			<Value>eventlog</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1751">
			<TBUID>F8F460CA-2CCA-2212-19DA-D1C3B132A603</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85259</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1752">
			<TBUID>D04094C2-CB83-7CB9-2616-3DDB74C7B124</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85295</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1753">
			<TBUID>325ABF23-35F9-4696-4A83-9391A2DB8739</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85258</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1754">
			<TBUID>76175865-FA54-C808-BD78-119A94FF1EED</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85296</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1755">
			<TBUID>E246FF57-D6AB-117C-A995-568ECFC10E7F</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85297</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1756">
			<TBUID>C77ECA7D-EEAA-3826-155A-4B70BBA62A74</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85290</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1757">
			<TBUID>456D6CFD-B1D3-DC9F-D47A-AAF086D017F2</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85255</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1758">
			<TBUID>92974F94-8CEA-314E-C28C-458FC15694EB</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85291</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1759">
			<TBUID>80630742-07B1-029F-47E8-1ED3854781EF</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85254</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1760">
			<TBUID>EFA92AFD-6CF8-0220-4036-E5A35AF847A9</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85292</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1761">
			<TBUID>B15FECC5-8DF7-F052-A022-FB16750A4D28</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85219</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1762">
			<TBUID>0C86AC45-2677-5D5B-E75A-9B8A96D6A813</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85257</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1763">
			<TBUID>81C8A1A0-5BFA-146B-0B15-637B0822909E</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85218</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1764">
			<TBUID>B69D03E4-7E35-DBC9-7062-A4577AB4A959</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85256</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1765">
			<TBUID>2A470829-0170-3628-9A4B-5AE6B15D17B3</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85251</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1766">
			<TBUID>D969A904-1162-5AE0-9D3A-1C9C7D46C8F3</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85250</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1767">
			<TBUID>2D89208D-9E32-67C9-AB68-6C6BFAAFBC99</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85253</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1768">
			<TBUID>23D5D0E8-C908-2D27-2D56-A89A15A7F6A0</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85252</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1769">
			<TBUID>8F62A9A8-C918-EE79-CB8F-4709F0D15FFB</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>t85275</Name>
			<Value>120</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1770">
			<TBUID>C49A270A-74A9-645E-81E0-42701C40DEB3</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85216</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1771">
			<TBUID>A724E931-6974-E118-9B5D-820FA5913906</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85217</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1772">
			<TBUID>C1B916B3-A80A-78CB-8AB4-4E0C1F14E8BD</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85214</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1773">
			<TBUID>B8477956-7C5B-245D-698F-5CBA12A38154</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85215</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1774">
			<TBUID>0C866161-EBD6-96BD-D0B5-0CB39072CD68</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85212</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1775">
			<TBUID>9344671B-4BA4-57C0-D665-BE634DC093EE</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85213</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1776">
			<TBUID>5598898E-59AB-788B-C30F-A9421BCC8C4C</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85210</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1777">
			<TBUID>5987F2B4-49B9-7130-3DD8-F58A85AFFC04</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85211</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1778">
			<TBUID>7896D93F-2CA7-C549-1726-D0FD1E5ABEF3</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85265</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1779">
			<TBUID>284E503B-CDF6-D296-1744-7F5D1DE2E943</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85264</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1780">
			<TBUID>D958AC4E-ABD3-6179-4723-D07A346B019F</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85263</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1781">
			<TBUID>33C50126-24CF-3784-EEC1-8093B5816D64</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85262</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1782">
			<TBUID>D5491A4E-60BD-EA8D-0CA1-739E9A566E55</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85261</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1783">
			<TBUID>66C6E48C-EC3E-12F6-9599-F113C25C262D</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85260</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1784">
			<TBUID>4D29899D-291D-1F59-D8D1-74026B1A30EE</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85220</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1785">
			<TBUID>6BA22628-142E-EC99-E2B0-6BA1CEB87C5D</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85221</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1786">
			<TBUID>37CBE82D-3215-3DBF-0258-374CAC97B418</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85233</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1787">
			<TBUID>F642AC90-B795-7790-D16D-A7354B58A791</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85232</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1788">
			<TBUID>130483D3-DA50-D15D-6CD3-1DB8FD49070B</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85235</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1789">
			<TBUID>1B55BB0F-1C81-C992-6D3F-5706A48769CD</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85234</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1790">
			<TBUID>FEEE477D-9C77-25FC-FE64-43F645A9870A</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85237</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1791">
			<TBUID>E4135DCE-6748-A4D1-FEA1-C7A63EF242DE</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85236</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1792">
			<TBUID>EB1590C1-4AC4-196F-6D6E-256CCEB9C9E1</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85275</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1793">
			<TBUID>BB90EC2D-3AB2-1131-1430-8526077B7E48</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85231</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1794">
			<TBUID>4D35EBEE-E651-B985-CFD7-C35FF7F481B7</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85230</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1795">
			<TBUID>5E6CC995-2F6D-972D-E5ED-03AAF58BFBDD</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85281</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1796">
			<TBUID>6AE3DCA8-CA10-5DC0-935D-F376558717B0</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85208</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1797">
			<TBUID>0543B6CD-47DC-9E5C-2F46-5E86C45DD6EA</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85246</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1798">
			<TBUID>31F2D99D-45CA-F8AF-E9B8-352FA2D30C35</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85282</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1799">
			<TBUID>30A4606B-52CD-6720-C299-11B256583EDF</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85207</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1800">
			<TBUID>063B2186-7084-E4F8-FC49-833CC2F0769A</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>f85275</Name>
			<Value>10</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1801">
			<TBUID>0F512DFF-816D-1D69-BC0B-862B25C34E23</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85245</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1802">
			<TBUID>B5113EE2-1871-FA3C-08BB-6B5163616F3A</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85244</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1803">
			<TBUID>15613C7F-3800-E076-53E6-C785CAEB8BC6</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85280</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1804">
			<TBUID>E458916D-2584-8812-CDD3-3796E9F207DA</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85209</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1805">
			<TBUID>0CBC3D3C-2AE4-DE94-CF13-AE910AF1E1C3</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85243</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1806">
			<TBUID>82CDEB1E-FC1D-AFFC-51ED-833DB0A8B633</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85242</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1807">
			<TBUID>6BE80A58-4CC1-3C11-6AD2-C5043C1E48C5</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85241</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1808">
			<TBUID>03A5782E-199E-6AEE-E3FF-FA2F3EDD9BF9</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85240</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1809">
			<TBUID>AAA8DF75-5F8E-DBAE-2D9A-D780106CBB5B</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85200</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1810">
			<TBUID>7BDE0BBD-6C9A-08C4-A252-11B4E5A2F9A6</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85201</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1811">
			<TBUID>B33DB0A5-2E3E-B551-3302-809A497CE464</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85202</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1812">
			<TBUID>9940817E-5531-641A-C275-D018A528C038</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85203</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1813">
			<TBUID>6808B2F7-DE9C-52B1-52C5-FF0D174ED1EF</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85204</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1814">
			<TBUID>86D0428F-23E2-77C4-7A28-B5D4B36C1649</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85205</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1815">
			<TBUID>EDC76BD1-4DB1-09A3-86A7-98F16F4C2363</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85206</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1816">
			<TBUID>2CE6E7C2-2E87-C629-4B33-06F7ED1F0135</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85222</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1817">
			<TBUID>3E057F99-6D9C-572C-712E-243F76CCB30E</TBUID>
			<Version>14</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85276</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1818">
			<TBUID>037F0DFB-7BA4-3531-7CF8-C80E8C886750</TBUID>
			<Version>14</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>f85276</Name>
			<Value>10</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1819">
			<TBUID>4C43A499-8EBB-F5CC-2C8C-3610387F1F20</TBUID>
			<Version>14</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>t85276</Name>
			<Value>120</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1820">
			<TBUID>8F0F53F7-617B-9B6A-E308-AA01D26DA885</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85298</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1838">
			<TBUID>5393B871-1151-B08A-F60D-AAF0F1D56A90</TBUID>
			<Version>1</Version>
			<LogInspectionRuleID>59</LogInspectionRuleID>
			<Name>l18950</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1839">
			<TBUID>DF07544E-EB6F-A514-3202-17B569D35D11</TBUID>
			<Version>1</Version>
			<LogInspectionRuleID>59</LogInspectionRuleID>
			<Name>l18951</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1840">
			<TBUID>F18E0C82-5767-9AA3-8517-C01EDA0D9049</TBUID>
			<Version>1</Version>
			<LogInspectionRuleID>59</LogInspectionRuleID>
			<Name>l18952</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1841">
			<TBUID>08423C84-B6C3-6AC4-A4F6-871276975F87</TBUID>
			<Version>1</Version>
			<LogInspectionRuleID>59</LogInspectionRuleID>
			<Name>l18953</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1842">
			<TBUID>D14AD611-3078-13D8-97B3-170A122CFFBF</TBUID>
			<Version>1</Version>
			<LogInspectionRuleID>59</LogInspectionRuleID>
			<Name>l18954</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1843">
			<TBUID>E0C2BC47-0570-CB01-A954-E0F8A3F01876</TBUID>
			<Version>1</Version>
			<LogInspectionRuleID>59</LogInspectionRuleID>
			<Name>l18955</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1844">
			<TBUID>45969A29-7EE6-3B2C-4900-9BF2ED89592C</TBUID>
			<Version>1</Version>
			<LogInspectionRuleID>59</LogInspectionRuleID>
			<Name>l18956</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1845">
			<TBUID>75558965-8847-7DBF-1DB9-3D5BDF778DB5</TBUID>
			<Version>1</Version>
			<LogInspectionRuleID>59</LogInspectionRuleID>
			<Name>l18957</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1846">
			<TBUID>20E1898F-E52E-A8D4-0C71-3553160763B5</TBUID>
			<Version>1</Version>
			<LogInspectionRuleID>59</LogInspectionRuleID>
			<Name>l18958</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1847">
			<TBUID>F3CAF1E4-8146-7EBF-D7AE-1A5AA959E7FF</TBUID>
			<Version>1</Version>
			<LogInspectionRuleID>59</LogInspectionRuleID>
			<Name>l18959</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1848">
			<TBUID>7FEEC451-B827-CFBA-09B2-2022AF8B56DD</TBUID>
			<Version>1</Version>
			<LogInspectionRuleID>59</LogInspectionRuleID>
			<Name>l18960</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1849">
			<TBUID>5B036FCD-9C7F-764D-3274-60B43EEE0160</TBUID>
			<Version>1</Version>
			<LogInspectionRuleID>59</LogInspectionRuleID>
			<Name>l18961</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1850">
			<TBUID>84C1D48A-67E1-49BF-0829-E0FCF82EB5A6</TBUID>
			<Version>1</Version>
			<LogInspectionRuleID>59</LogInspectionRuleID>
			<Name>l18962</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1851">
			<TBUID>DBAC8437-6671-C1D7-0614-81AD35A359B9</TBUID>
			<Version>1</Version>
			<LogInspectionRuleID>59</LogInspectionRuleID>
			<Name>l18963</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1852">
			<TBUID>FFC53F0B-EA4E-4C5F-571F-06C681118A9A</TBUID>
			<Version>1</Version>
			<LogInspectionRuleID>59</LogInspectionRuleID>
			<Name>l18964</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1853">
			<TBUID>ADD14429-31E6-4A2F-22CD-2A8CC772FDC0</TBUID>
			<Version>1</Version>
			<LogInspectionRuleID>59</LogInspectionRuleID>
			<Name>l18965</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1854">
			<TBUID>29980B83-981F-2BF1-626A-5A350E15F73F</TBUID>
			<Version>1</Version>
			<LogInspectionRuleID>59</LogInspectionRuleID>
			<Name>l18966</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1855">
			<TBUID>2DD0E54B-7D03-391A-30DD-D90088CFB4FD</TBUID>
			<Version>1</Version>
			<LogInspectionRuleID>59</LogInspectionRuleID>
			<Name>l18967</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1856">
			<TBUID>B938B28D-2031-419C-CA09-FA3A5A56291D</TBUID>
			<Version>1</Version>
			<LogInspectionRuleID>59</LogInspectionRuleID>
			<Name>l18968</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1857">
			<TBUID>8FE8B952-655B-E90A-1E73-5BF280713123</TBUID>
			<Version>1</Version>
			<LogInspectionRuleID>59</LogInspectionRuleID>
			<Name>l18969</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1858">
			<TBUID>31DDE0A4-ACDE-6E69-EAFF-923791E53115</TBUID>
			<Version>1</Version>
			<LogInspectionRuleID>59</LogInspectionRuleID>
			<Name>l18970</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1859">
			<TBUID>47A266A6-6906-76C8-F255-DE1FCE591E10</TBUID>
			<Version>1</Version>
			<LogInspectionRuleID>59</LogInspectionRuleID>
			<Name>l18971</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1860">
			<TBUID>05D190D1-5FFC-359D-EA87-DF17E2B59B55</TBUID>
			<Version>1</Version>
			<LogInspectionRuleID>59</LogInspectionRuleID>
			<Name>l18972</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1861">
			<TBUID>D55C89BA-C766-ED8F-2FBC-40A8FBE6E35D</TBUID>
			<Version>29</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18609</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1862">
			<TBUID>7B6F9FC1-A51E-4FC6-BF0E-85B84F0C5DAF</TBUID>
			<Version>29</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18610</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1863">
			<TBUID>55E473C8-5C86-6E45-DF32-14592EEECF5E</TBUID>
			<Version>29</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18611</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1864">
			<TBUID>306020C5-F8FD-73BB-1F11-098C933C71D7</TBUID>
			<Version>29</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18612</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1865">
			<TBUID>25FF897C-7275-A633-6574-00BFE7F985A6</TBUID>
			<Version>29</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18613</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1866">
			<TBUID>FD740689-2CA4-6F96-A83E-147F85BAB403</TBUID>
			<Version>29</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18614</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1867">
			<TBUID>D3AD8378-D533-3B80-B160-AC793D915B61</TBUID>
			<Version>29</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18618</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1868">
			<TBUID>407DE6CC-B4FF-AC37-31E6-AF5BCB8A6CCD</TBUID>
			<Version>29</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18619</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1869">
			<TBUID>C5A6B710-DC2C-76E3-DF0F-56E2F14C55A2</TBUID>
			<Version>29</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18620</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1870">
			<TBUID>9BF91C14-F7E1-1611-A6E5-9A808E945000</TBUID>
			<Version>29</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18621</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1871">
			<TBUID>759847B9-D5B1-1744-2E30-4C46A715A7DE</TBUID>
			<Version>29</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18625</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1872">
			<TBUID>250E1191-F389-EF72-719E-C57B54BA8FD0</TBUID>
			<Version>30</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18800</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1873">
			<TBUID>1B9F9282-1358-3E21-D5D6-A2203596D206</TBUID>
			<Version>30</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18801</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1874">
			<TBUID>2D43FE22-D252-947A-9ED1-6C6A2CAECFBC</TBUID>
			<Version>30</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18858</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1875">
			<TBUID>990A8A70-11A7-B489-F79D-541EDFF99287</TBUID>
			<Version>29</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18615</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1876">
			<TBUID>17A6127F-9A23-6493-CEDF-B1A155A70E3A</TBUID>
			<Version>29</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18616</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1877">
			<TBUID>C17C0074-5E82-23AA-082E-288CD6DDE899</TBUID>
			<Version>29</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18617</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1878">
			<TBUID>7667F236-14AC-6DDA-0F6A-3F857DC6C6D7</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18859</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1879">
			<TBUID>A06F2B6F-F39E-4D04-59CF-DD1303795A3C</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18860</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1880">
			<TBUID>9B576E62-7E14-EEDF-A8B2-3ED690503BAF</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18861</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1881">
			<TBUID>001AA70C-EBFE-1BB6-A0E4-38050388A2F6</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18862</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1882">
			<TBUID>ACAA0472-D482-D8E7-266B-1D05BEDFA930</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18863</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1883">
			<TBUID>90C40577-06D6-150B-5090-B9FB66B45D23</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18867</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1884">
			<TBUID>21F8642E-A7E6-0D44-D2BC-16FF71490507</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18868</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1885">
			<TBUID>1764B1F2-F614-3C3A-5198-94B1BCA40419</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18869</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1886">
			<TBUID>D5D72375-3F33-98CD-92D3-EDC08C984550</TBUID>
			<Version>14</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18870</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1887">
			<TBUID>738692D2-7444-364C-A7A3-3F81A4B7F5F5</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18872</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1888">
			<TBUID>5ACAB521-CE2C-3004-08D7-5E91819DD634</TBUID>
			<Version>1</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18871</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1889">
			<TBUID>169D62BB-D754-2E0A-EFBE-EC5D0EAFDE7B</TBUID>
			<Version>2</Version>
			<LogInspectionRuleID>50</LogInspectionRuleID>
			<Name>l19811</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1890">
			<TBUID>6FDED94D-F206-A7F1-E698-3C5253400A5C</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18802</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1891">
			<TBUID>46A173F4-E43E-8B40-B923-8A348AF87AC1</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18803</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1892">
			<TBUID>FA3DBED1-1123-D272-5E8B-214716FD1AE8</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18804</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1893">
			<TBUID>3C2ECEB7-D49C-E7F5-AAA0-F2232DF403FC</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18805</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1894">
			<TBUID>E8968C58-02B7-E870-A8B2-9DBE20AEB523</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18806</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1895">
			<TBUID>50B19E9E-6D8E-1897-51EE-674D722B62D9</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18807</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1896">
			<TBUID>59609620-1D16-86A7-C7BA-C207043D7FA5</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18808</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1897">
			<TBUID>C89792FB-58DD-A33B-37D9-738AB649B848</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18809</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1898">
			<TBUID>AEFDDC71-F17E-0FA4-C4DF-F7E1F82C350B</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18810</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1899">
			<TBUID>93005C49-93FA-427B-62C4-CD78C913A80C</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18811</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1900">
			<TBUID>F56DA6E8-1973-3615-A639-D3575AB59DB1</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18812</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1901">
			<TBUID>40A5409D-A265-F672-510D-748FF645746B</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18813</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1902">
			<TBUID>48ED1C84-6411-4988-6028-888FB0E5AFFA</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18814</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1903">
			<TBUID>BD03C1E7-5851-18FA-EA33-89E7EC4DECC6</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18815</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="880">
			<TBUID>1B28638A-03A7-547E-ACCE-673E8E14FFD3</TBUID>
			<Version>27</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18155</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1904">
			<TBUID>B4B0A695-56A2-4D39-EB76-5079700045F4</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18816</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="881">
			<TBUID>5E1DA10C-31E0-6428-7252-CD59CDD42D52</TBUID>
			<Version>27</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18115</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1905">
			<TBUID>082E932A-4E08-7592-4468-609589DB784D</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18817</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="882">
			<TBUID>205BFD45-B1B2-12A4-453A-02901F19C0AE</TBUID>
			<Version>27</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18156</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1906">
			<TBUID>188F2D52-8D63-10E0-025F-371CA3FAC1E7</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18818</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="883">
			<TBUID>CD2480EC-4899-4257-08D9-952190D350B1</TBUID>
			<Version>27</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18116</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1907">
			<TBUID>D274CD3E-941B-BA3E-6494-D3259D453F87</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18819</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="884">
			<TBUID>A7622330-D0C5-3287-33A4-01D33294207E</TBUID>
			<Version>27</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18153</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1908">
			<TBUID>0E9904B8-F4EF-9E3C-FD3A-3A043DD3F1FB</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18820</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="885">
			<TBUID>AB09613D-8392-C29B-9B4D-3A4E5C41611C</TBUID>
			<Version>27</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18113</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1909">
			<TBUID>D62CF13E-E332-F5DE-0947-34B09B46A175</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18821</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="886">
			<TBUID>9BF07A0D-F84F-AC23-20AE-AFB4C6767908</TBUID>
			<Version>27</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18154</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1910">
			<TBUID>4D94D0FA-D6BA-8D4B-F0BB-CA1DE2F40FFF</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18822</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="887">
			<TBUID>25F36039-8FF5-2930-2290-753F56D6C5CA</TBUID>
			<Version>27</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18114</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1911">
			<TBUID>B8462EB2-53C0-74E8-BD7F-3AB9745A9B4D</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18823</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="888">
			<TBUID>A15EB832-CA35-3C80-00D4-B24DA5065201</TBUID>
			<Version>27</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18130</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1912">
			<TBUID>FFB37881-8D05-A90B-1A34-8164138C8EBC</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18824</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="889">
			<TBUID>EF2DB7D3-6E98-B49F-4591-5069E45ABD2A</TBUID>
			<Version>27</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18132</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1913">
			<TBUID>74E44CB6-A210-3FBC-1829-183253602F86</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18825</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="890">
			<TBUID>E630211E-1791-73A1-9BDC-F6B99362B5E4</TBUID>
			<Version>27</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18131</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1914">
			<TBUID>9F953341-080F-652B-5507-441D30BD4042</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18826</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="891">
			<TBUID>46310F6F-23DF-A318-FE6E-E86D2D776B12</TBUID>
			<Version>27</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18134</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1915">
			<TBUID>8A6E26CD-4AA4-9F94-41E6-6621B3B08601</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18827</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="892">
			<TBUID>E2BACEE4-C3E3-AB00-F5D9-78E7F5C94719</TBUID>
			<Version>4</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18179</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1916">
			<TBUID>84105F0F-4AA6-F71C-1870-DE0BD65CC524</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18828</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="893">
			<TBUID>ED82F13D-3E25-7891-F88D-5300292B3320</TBUID>
			<Version>2</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18180</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1917">
			<TBUID>B6DC20B4-8321-3F76-A8EB-84FD19398338</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18829</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="894">
			<TBUID>36A5FF07-DF94-2188-5C7D-10CD8C758FA8</TBUID>
			<Version>2</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18181</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1918">
			<TBUID>0BB513CB-B4EC-A36A-D2CE-07320D0FC37C</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18830</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="895">
			<TBUID>956FD9F4-C9E9-96C0-82FB-ED1A9FF1CD72</TBUID>
			<Version>1</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18182</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1919">
			<TBUID>A7CD7091-DC71-D0D8-1E68-826F0FA0E89B</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18831</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="896">
			<TBUID>D53EF8EF-49A6-A45A-4E06-226A3D3F027E</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18133</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1920">
			<TBUID>C265EFFC-A75B-5D57-E9F7-CD82208CC742</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18832</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="897">
			<TBUID>113F1427-D23F-5D32-A28C-A1C7F232B734</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18125</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1921">
			<TBUID>20EC142A-95AA-EFC5-7C12-F1C5AF1828AB</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18833</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="898">
			<TBUID>ABFC4067-4BCF-0206-110F-49745ACF55CA</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18126</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1922">
			<TBUID>7D272320-4015-6347-72A0-E35568D25B67</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18834</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="899">
			<TBUID>51532BAB-EAF2-AA7A-DA75-A2B5718F050E</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18127</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1923">
			<TBUID>1F3834DA-CF4B-BFC6-D54B-D83DFB8384D9</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18835</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="900">
			<TBUID>DCF458F5-498E-CF94-CD57-08965E6B1174</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18128</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1924">
			<TBUID>5799D13B-A486-3016-49E7-C792AC85908F</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18836</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="901">
			<TBUID>5122FF75-B179-EA02-E69A-C3316AA5FBAA</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18129</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1925">
			<TBUID>6413AC56-FDC3-A9BA-EA41-36430D42AF8B</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18837</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="902">
			<TBUID>EDEF0483-2622-2075-337E-F31FA6C3A885</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18100</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1926">
			<TBUID>50C8CEF7-F1C2-F12B-B5BB-6473D59B6181</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18838</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="903">
			<TBUID>D5C8A7BA-64AF-812D-8679-0C8D60F291E7</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18101</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1927">
			<TBUID>21A06CC1-D3FF-1595-576D-EC518BE9D815</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18839</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="904">
			<TBUID>B0265F1A-0C7E-BFF2-6996-ECAA2B740DE1</TBUID>
			<Version>27</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18141</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1928">
			<TBUID>C37DE757-0D55-0E30-0D2C-8B2E565F84C5</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18840</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="905">
			<TBUID>2928F08B-3009-7D4C-2D3C-491B07E5D3D8</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18140</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1929">
			<TBUID>A88DE849-FB1F-9A0B-C405-B2C867B0EDC8</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18841</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="906">
			<TBUID>88C1A6DD-DB91-2528-FC48-C7C13F28D96D</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18145</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1930">
			<TBUID>3BD959E2-EFFF-7353-D5EE-3B2858AC695C</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18842</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="907">
			<TBUID>994A56FD-C1A9-DDA2-2810-50605131C519</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18144</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1931">
			<TBUID>A28ABC13-D3D9-B2F0-BAB7-1B8D73F5B6B9</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18843</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="908">
			<TBUID>26AAC6DD-91EA-C626-76DC-48ADC160A02B</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18143</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1932">
			<TBUID>54612A76-B801-4A6B-0FD7-EE6C4076E4DD</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18844</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="909">
			<TBUID>E5C0F6A8-E21C-C764-779A-E690EEC2AB69</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18142</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1933">
			<TBUID>061B6C8D-8262-D7F5-2B5D-9B5885F9D484</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18845</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="910">
			<TBUID>B6796FD8-D727-0D4B-119D-F7DF41F2BAC7</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18137</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1934">
			<TBUID>E55D6E38-DEAD-B9C7-B66E-5141F2DC5089</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18846</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="911">
			<TBUID>8128D9B3-4F54-9D6A-BA0B-B607F2E697AC</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18138</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1935">
			<TBUID>A806DEFE-3383-79C0-870B-0053A781DE73</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18847</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="912">
			<TBUID>77E53328-B5E0-114B-3330-898D069E2C4C</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18135</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1936">
			<TBUID>2C409060-A25C-5F3C-94DD-ADBBB75A36BA</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18848</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="913">
			<TBUID>FE102E5C-71EA-95E9-0046-19D511D2BAF6</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18136</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1937">
			<TBUID>9DF9090D-5260-3D26-D75D-3AF5DCA7D71E</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18849</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="914">
			<TBUID>43E8876C-23EF-75A9-3C0F-57FD603D1DEE</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18171</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1938">
			<TBUID>3D5C4A04-8980-A8F1-540C-80739BB23890</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18850</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="915">
			<TBUID>A6C8451D-7E64-D560-7979-7D9C036EB3DA</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18139</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1939">
			<TBUID>A4CF7809-4D3E-1E09-47C0-A614A48FC086</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18851</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="916">
			<TBUID>6638E341-60BE-B773-B7DC-40CADD98B0C6</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18172</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1940">
			<TBUID>C9DA545B-69AB-5D62-D9E3-5322E0F7D200</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18852</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="917">
			<TBUID>7F94BA60-1728-DFA8-E3BD-CEFDBD8727D0</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18170</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1941">
			<TBUID>ED107B61-2F9B-F55E-824F-A8D70833AF34</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18853</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="918">
			<TBUID>A865DF19-3503-E553-F41C-E357C289D6AB</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18173</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1942">
			<TBUID>DF363AC9-0F7E-7788-36A6-8A9FD0ABDEC7</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18854</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="919">
			<TBUID>D647EF21-5780-DEF2-CEE1-34D71A61B585</TBUID>
			<Version>15</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18174</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1943">
			<TBUID>64E960CF-2440-D699-39F2-854A341C05FC</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18855</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="920">
			<TBUID>B1FED08D-BF4B-062E-D203-BF315ADF7550</TBUID>
			<Version>15</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18175</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1944">
			<TBUID>EB7794C6-009D-1503-8152-7C40D711AB13</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18856</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="921">
			<TBUID>66677287-74C6-CE87-D9FC-941B20C83CAD</TBUID>
			<Version>15</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18176</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1945">
			<TBUID>ECBDB9CE-E089-161F-CC10-B703B60323D2</TBUID>
			<Version>31</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18857</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="922">
			<TBUID>EEB118E1-923E-5301-D596-4EE2D5BCDC02</TBUID>
			<Version>11</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18177</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1946">
			<TBUID>70B11841-1412-9258-9A00-9B8BA1E182EA</TBUID>
			<Version>30</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18601</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="923">
			<TBUID>B1692A96-804A-73ED-5F2C-6203AB1476F5</TBUID>
			<Version>7</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18178</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1947">
			<TBUID>EC1B5C80-27B9-6FC6-D990-55D1C84CA57E</TBUID>
			<Version>30</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18602</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="924">
			<TBUID>314264E1-824D-D51C-DFCC-25D95658C8DE</TBUID>
			<Version>7</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18193</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1948">
			<TBUID>F6C42BB4-D12B-4690-54AE-B1DC28797676</TBUID>
			<Version>30</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18603</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="925">
			<TBUID>8D955E34-A839-4ACE-44BF-3057656DB1F9</TBUID>
			<Version>33</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>LogFiles</Name>
			<Value>Application,System,Security</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1949">
			<TBUID>18CD99B9-4E88-E262-1AEE-C5F565269AB3</TBUID>
			<Version>30</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18604</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="926">
			<TBUID>F071B041-12E6-82B7-2033-F952FE085D91</TBUID>
			<Version>33</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>LogType</Name>
			<Value>eventlog</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1950">
			<TBUID>2688AAF7-6324-A9B7-431F-72376FDCBDAB</TBUID>
			<Version>30</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18605</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="927">
			<TBUID>AA9A35C7-3E0F-067E-10B6-B654C87B9040</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18110</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1951">
			<TBUID>1F71681C-E474-2F65-B847-D10B51DBFA56</TBUID>
			<Version>30</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18606</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="928">
			<TBUID>62333D4E-2AB3-878E-F659-371C639F4BCA</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>t18152</Name>
			<Value>240</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1952">
			<TBUID>196F2AE2-B417-1050-B50A-0B9B08FD7EFF</TBUID>
			<Version>30</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18607</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="929">
			<TBUID>83E54C59-187A-049F-7803-2513EB4C1FE4</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18112</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1953">
			<TBUID>7A18B191-A587-2E22-2E15-8F95587F5F23</TBUID>
			<Version>30</Version>
			<LogInspectionRuleID>60</LogInspectionRuleID>
			<Name>l18608</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="930">
			<TBUID>CCB5CA8F-D9FD-DAD2-CF68-50D12E461E1A</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>t18151</Name>
			<Value>240</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1954">
			<TBUID>16D9703B-8ED8-A367-BC96-8ED67CA8D8DC</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19831</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="931">
			<TBUID>EFD2519D-A33A-1E2E-EB09-DDCED9EF7E9B</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18111</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1955">
			<TBUID>39B6DA05-E628-021C-83D1-C10DBF6AED57</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19832</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="932">
			<TBUID>B069D108-492B-A7F4-3421-68029AA004B5</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>t18154</Name>
			<Value>240</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1956">
			<TBUID>57E9AB30-1C4A-CDB6-8A07-A9D211084648</TBUID>
			<Version>17</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19833</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="933">
			<TBUID>C41CA242-B8E7-CBD3-1E64-D0994C000F17</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>t18153</Name>
			<Value>240</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1957">
			<TBUID>78BED294-C07B-0688-8039-243E0A42CB4F</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19834</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="934">
			<TBUID>D3466CBC-7F5C-1B36-308E-698D8690E0A9</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>t18156</Name>
			<Value>240</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1958">
			<TBUID>A1F46E22-3D8A-8CC5-9907-114F3A5FDD20</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19835</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="935">
			<TBUID>B85103FB-6D2B-6296-2821-830E385C93DB</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>t18155</Name>
			<Value>120</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1959">
			<TBUID>7C17FE3A-5745-F86C-DA1F-F1F0331E104E</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19836</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="936">
			<TBUID>D24A7090-D003-E8D7-57DE-E92F87A3A446</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18106</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1960">
			<TBUID>BF9AD244-71D2-9423-6044-B8D74E7DFB92</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19837</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="937">
			<TBUID>93376005-CDC8-A82B-B138-65A59D2DED72</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18107</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1961">
			<TBUID>4F6B62C0-B7DE-2BC8-0FE9-13EBAEAC8321</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19838</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="938">
			<TBUID>DCF86DD8-2247-58E4-D268-8E0DE2640E19</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18108</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1962">
			<TBUID>2A1F1D3F-026A-DF1B-1012-AC4E7A45BBAC</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19839</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="939">
			<TBUID>204D8EBF-F617-CF22-72D6-3859916BA5FE</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18109</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1963">
			<TBUID>DC8D46D7-D450-7D3F-307F-205CA5C495CB</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19840</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="940">
			<TBUID>07BEA963-85CD-0CCB-21E6-53ABB42701EB</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18102</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1964">
			<TBUID>A85A4CEA-60E0-5063-A29E-F323C058A976</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19841</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="941">
			<TBUID>37DAA985-44EA-C951-7DB8-0EAD80BB5C3C</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18103</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1965">
			<TBUID>7F7EFE0B-D13D-EC5B-711C-2BAB744EC170</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19842</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="942">
			<TBUID>92E5377A-B1EB-EBBD-1BE4-B6094468AD68</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18104</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1966">
			<TBUID>D774AE4B-15A7-5CC3-16E3-3372A996788A</TBUID>
			<Version>16</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19843</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="943">
			<TBUID>AE1A6B0C-5629-E3CC-250E-95B5CDAC2D28</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18105</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1967">
			<TBUID>28B165BD-5BC9-88C7-AE2C-BA37068A7CFA</TBUID>
			<Version>14</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19844</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="944">
			<TBUID>9C56D8D2-E2F3-0E40-E769-C3206D177161</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>f18152</Name>
			<Value>6</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1968">
			<TBUID>2415FDD9-A49D-7187-7A2B-48EF31744504</TBUID>
			<Version>14</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19845</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="945">
			<TBUID>D280792E-1FA4-373A-63B1-08CA7533880A</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>f18151</Name>
			<Value>6</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1969">
			<TBUID>9B371C52-8EAD-8C09-2420-6F044332EDB0</TBUID>
			<Version>13</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19846</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="946">
			<TBUID>EC2D8BA2-8EEE-A7FE-824B-F524CD73651B</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>f18154</Name>
			<Value>6</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1970">
			<TBUID>863E8F91-F93A-13F2-F880-7106AB35B44D</TBUID>
			<Version>7</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19868</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="947">
			<TBUID>107A7367-576F-D16B-F507-6C32CDDA9305</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>f18153</Name>
			<Value>6</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1971">
			<TBUID>A16251A2-8560-87F3-BD0C-C618C6F25F06</TBUID>
			<Version>7</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19869</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="948">
			<TBUID>CAA7BB60-1702-DC41-4920-C80B841BAFE5</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>f18156</Name>
			<Value>6</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1972">
			<TBUID>A9FB15BA-7D34-2F0E-BC7F-7D49A2E86818</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19871</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="949">
			<TBUID>C04ACEEE-0C4E-ACA4-E84F-3F6BD5799076</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>f18155</Name>
			<Value>6</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1973">
			<TBUID>C56AAA3B-D3DB-DB7E-1068-3083FF8DC387</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19861</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="950">
			<TBUID>0AD7284E-BDD8-3F95-CFEA-073A20A47363</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18149</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1974">
			<TBUID>429D8F50-1E5A-B7C4-34A5-C0EAD1E3D764</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19865</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="951">
			<TBUID>4C84C4A8-3CAC-5370-B5AC-57EC5AA0040C</TBUID>
			<Version>27</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18148</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1975">
			<TBUID>AE2FC82B-8539-D6EA-A3BF-67FF609C807D</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19866</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="952">
			<TBUID>DA953338-1EE1-7002-BBAD-A341F75E6C4F</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18121</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1976">
			<TBUID>A142181D-C686-555D-3645-471422210A5C</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19867</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="953">
			<TBUID>3DFC7028-8258-EF47-2D54-A6AC927B5F24</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18147</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1977">
			<TBUID>F984481A-A3B2-A1EB-A6A7-3CBEC18712B5</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19862</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="954">
			<TBUID>724F2F09-0974-E50D-9A02-B572E14912F1</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18120</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1978">
			<TBUID>CA47995C-B9D9-1ABF-EBD3-58AAFB1B1D03</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19863</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="955">
			<TBUID>58A40CEB-587F-E300-AB2D-E71407D7F4DB</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18146</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1979">
			<TBUID>FF1331A2-B350-F0CA-0BE3-B220B75F2F21</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19864</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="956">
			<TBUID>D3DB6BD7-E4FA-B088-0BDC-128156CAF500</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18151</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1980">
			<TBUID>9773725A-E7B9-8BC5-BBA8-EA302B3C4851</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19847</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="957">
			<TBUID>6C05CAC4-1F38-EC46-0EC4-009BDBCBB486</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18119</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1981">
			<TBUID>EFF495A1-AA7E-D077-E6CC-FC79E2C81C1A</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19848</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="958">
			<TBUID>7BC08095-B541-0DF4-E6FD-9ED11460C3D5</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18152</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1982">
			<TBUID>295CF875-9808-5431-08FD-F6B85E21A524</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19849</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="959">
			<TBUID>11A6684E-9AEA-B1A5-3948-04307A83391F</TBUID>
			<Version>27</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18117</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1983">
			<TBUID>D123ECCF-1D8D-65C4-FB52-895694B5169A</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19850</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="960">
			<TBUID>B3730A59-3EBA-3F41-FA05-1E47E59924EA</TBUID>
			<Version>28</Version>
			<LogInspectionRuleID>40</LogInspectionRuleID>
			<Name>l18118</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1984">
			<TBUID>BC5B5B1B-0F19-6D8E-04C2-CF78128C64E7</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19851</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1985">
			<TBUID>872011D4-E807-4112-1C70-C561F44773D2</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19852</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1986">
			<TBUID>CEC00E9E-F176-A951-DF13-90D5AB93F93D</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19853</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1987">
			<TBUID>F6CF6607-C2D3-256A-4EEC-90993708B5CE</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19855</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1988">
			<TBUID>83E1C93C-2642-CD61-E5E2-81CC049C019F</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19856</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1989">
			<TBUID>12A72C82-7761-51AF-6B71-05351DAA7AF3</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19857</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1990">
			<TBUID>92EA5B2F-A46E-051E-505D-091832EAAE31</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19858</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1991">
			<TBUID>1CD96142-B2DC-B20E-E325-D86F23FAF756</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19859</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1992">
			<TBUID>BE32B264-4055-1BC8-4E36-C6DEEB668917</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19860</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1993">
			<TBUID>C768C85C-E366-0E92-D5C6-AC920D9BEBC8</TBUID>
			<Version>5</Version>
			<LogInspectionRuleID>61</LogInspectionRuleID>
			<Name>l19873</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1994">
			<TBUID>8CB02EDB-6DDC-DF73-84CA-229036FE5AA8</TBUID>
			<Version>1</Version>
			<LogInspectionRuleID>57</LogInspectionRuleID>
			<Name>l85266</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1995">
			<TBUID>0ED158A4-9C7F-B3DA-CF94-2FB9DDAEBB33</TBUID>
			<Version>19</Version>
			<LogInspectionRuleID>62</LogInspectionRuleID>
			<Name>l18900</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1996">
			<TBUID>1F99B0E4-F7F5-4656-66A6-9BADB8305AD6</TBUID>
			<Version>19</Version>
			<LogInspectionRuleID>62</LogInspectionRuleID>
			<Name>l18901</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1997">
			<TBUID>797BF888-2C14-D04B-EE4A-E1F5E649C3BA</TBUID>
			<Version>19</Version>
			<LogInspectionRuleID>62</LogInspectionRuleID>
			<Name>l18902</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1998">
			<TBUID>02287F28-138C-EA1A-C738-3C604B6979A5</TBUID>
			<Version>19</Version>
			<LogInspectionRuleID>62</LogInspectionRuleID>
			<Name>l18903</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="1999">
			<TBUID>C65E0346-A002-447E-D999-A427F5EF5DBD</TBUID>
			<Version>19</Version>
			<LogInspectionRuleID>62</LogInspectionRuleID>
			<Name>l18905</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="2000">
			<TBUID>00FA57B0-C9EA-5D62-C436-0575160533DF</TBUID>
			<Version>19</Version>
			<LogInspectionRuleID>62</LogInspectionRuleID>
			<Name>l18907</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="2001">
			<TBUID>76FF1FC3-D812-B714-74EB-0E8243C61676</TBUID>
			<Version>19</Version>
			<LogInspectionRuleID>62</LogInspectionRuleID>
			<Name>l18908</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="2002">
			<TBUID>5EB16326-96FA-3CC8-4441-8D2AFF6A6B3E</TBUID>
			<Version>19</Version>
			<LogInspectionRuleID>62</LogInspectionRuleID>
			<Name>l18909</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="2003">
			<TBUID>A7BA316C-3DAC-AF58-3FD7-7CD1F3CF0FED</TBUID>
			<Version>19</Version>
			<LogInspectionRuleID>62</LogInspectionRuleID>
			<Name>l18911</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="2004">
			<TBUID>B3B467A5-65E8-2415-B541-DFD570C919CC</TBUID>
			<Version>19</Version>
			<LogInspectionRuleID>62</LogInspectionRuleID>
			<Name>l18913</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="2005">
			<TBUID>03D66076-0A07-AA8B-9C71-0F907E73C524</TBUID>
			<Version>19</Version>
			<LogInspectionRuleID>62</LogInspectionRuleID>
			<Name>l18914</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="2006">
			<TBUID>0D0D9E4F-5A94-1EF4-9385-292C5A9BB23E</TBUID>
			<Version>19</Version>
			<LogInspectionRuleID>62</LogInspectionRuleID>
			<Name>l18916</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="2007">
			<TBUID>58A02B07-F1BA-2817-B9BC-3EBC0961AA84</TBUID>
			<Version>19</Version>
			<LogInspectionRuleID>62</LogInspectionRuleID>
			<Name>l18917</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="2008">
			<TBUID>5120AC56-8BB7-AD38-CFCB-905FE5988C07</TBUID>
			<Version>19</Version>
			<LogInspectionRuleID>62</LogInspectionRuleID>
			<Name>l18918</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="2009">
			<TBUID>2BB1C494-DC34-30F1-6F76-2737066218F6</TBUID>
			<Version>19</Version>
			<LogInspectionRuleID>62</LogInspectionRuleID>
			<Name>l18919</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="2010">
			<TBUID>B3AF390A-F698-7B61-5231-D9D8A749E8E1</TBUID>
			<Version>19</Version>
			<LogInspectionRuleID>62</LogInspectionRuleID>
			<Name>l18920</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="2011">
			<TBUID>3C1B6680-6D72-0D48-F55B-116276AAC777</TBUID>
			<Version>19</Version>
			<LogInspectionRuleID>62</LogInspectionRuleID>
			<Name>l18921</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="2012">
			<TBUID>16F7EFB0-E468-F091-A038-407AB1AEDC16</TBUID>
			<Version>19</Version>
			<LogInspectionRuleID>62</LogInspectionRuleID>
			<Name>l18922</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="2013">
			<TBUID>C4406F10-B9CB-EFE7-4DF7-C99FD7C7C50E</TBUID>
			<Version>19</Version>
			<LogInspectionRuleID>62</LogInspectionRuleID>
			<Name>l18923</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="2014">
			<TBUID>3D29D79D-166B-1323-D0DE-7B73B4EB09FF</TBUID>
			<Version>19</Version>
			<LogInspectionRuleID>62</LogInspectionRuleID>
			<Name>l18924</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="2015">
			<TBUID>7F58A46B-AD23-3569-A7D5-9F1C35737EBA</TBUID>
			<Version>19</Version>
			<LogInspectionRuleID>62</LogInspectionRuleID>
			<Name>l18925</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="2016">
			<TBUID>B588C57E-33CE-40FF-5CC0-CF7F68465960</TBUID>
			<Version>19</Version>
			<LogInspectionRuleID>62</LogInspectionRuleID>
			<Name>l18926</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="2017">
			<TBUID>00589171-612E-D7B1-1543-3AA60F82A87E</TBUID>
			<Version>19</Version>
			<LogInspectionRuleID>62</LogInspectionRuleID>
			<Name>l18927</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="2018">
			<TBUID>DB56BEB8-207E-D255-4FC5-0BB85C231BFA</TBUID>
			<Version>19</Version>
			<LogInspectionRuleID>62</LogInspectionRuleID>
			<Name>l18928</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="2019">
			<TBUID>30178D46-7295-ACB5-08D2-C8A1C84F1BB3</TBUID>
			<Version>19</Version>
			<LogInspectionRuleID>62</LogInspectionRuleID>
			<Name>l18929</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="2020">
			<TBUID>30ADE0B6-C13B-1305-930A-2C3DAFBD39F7</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>62</LogInspectionRuleID>
			<Name>l18904</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="2021">
			<TBUID>B4D55314-7128-644F-9F3A-9C1697780B85</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>62</LogInspectionRuleID>
			<Name>l18906</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="2022">
			<TBUID>22979851-1EC0-EB80-A7CE-603B81109D83</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>62</LogInspectionRuleID>
			<Name>l18910</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="2023">
			<TBUID>BDECAEA1-1E23-BF4E-6D64-DE2107F3188B</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>62</LogInspectionRuleID>
			<Name>l18912</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="2024">
			<TBUID>14F8CF7B-CA67-BE72-2BD3-979F26EBCBF3</TBUID>
			<Version>18</Version>
			<LogInspectionRuleID>62</LogInspectionRuleID>
			<Name>l18915</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="2025">
			<TBUID>044E3A45-7E98-8868-A440-1731F8202C76</TBUID>
			<Version>4</Version>
			<LogInspectionRuleID>62</LogInspectionRuleID>
			<Name>l18930</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="2026">
			<TBUID>26F27698-3520-2F15-8F16-2944708591EA</TBUID>
			<Version>2</Version>
			<LogInspectionRuleID>62</LogInspectionRuleID>
			<Name>l18934</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="2027">
			<TBUID>3B250C9A-18F1-2F02-8BD7-2A1632712243</TBUID>
			<Version>2</Version>
			<LogInspectionRuleID>62</LogInspectionRuleID>
			<Name>l18935</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="2028">
			<TBUID>3830E3BC-DFAC-46ED-5427-63CB0E50D022</TBUID>
			<Version>2</Version>
			<LogInspectionRuleID>63</LogInspectionRuleID>
			<Name>l18951</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="2029">
			<TBUID>E565E3CC-185B-CEF4-1FAE-517B4DB9DC25</TBUID>
			<Version>2</Version>
			<LogInspectionRuleID>63</LogInspectionRuleID>
			<Name>l18952</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
		<LogInspectionRuleMetadata doNotMerge="true" id="2030">
			<TBUID>D07F1766-0982-561F-DC17-AA657C7CE7F1</TBUID>
			<Version>1</Version>
			<LogInspectionRuleID>46</LogInspectionRuleID>
			<Name>l814049</Name>
			<Value>-1</Value>
			<UserEditable>true</UserEditable>
		</LogInspectionRuleMetadata>
	</LogInspectionRuleMetadatas>
	<LogInspectionRuleMetadataOverrides>
		<LogInspectionRuleMetadataOverride id="71">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1945</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="72">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1944</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="73">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1943</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="74">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1942</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="75">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1941</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="76">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1940</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="77">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1939</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="78">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1938</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="79">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1937</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="80">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1936</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="81">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1935</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="82">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1934</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="83">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1933</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="84">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1932</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="85">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1931</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="86">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1930</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="87">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1929</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="88">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1928</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="89">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1927</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="90">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1926</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="91">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1925</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="92">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1924</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="93">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1923</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="94">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1922</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="95">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1921</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="96">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1920</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="97">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1919</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="98">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1918</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="99">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1917</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="100">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1916</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="101">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1915</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="102">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1914</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="103">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1913</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="104">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1912</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="105">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1911</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="106">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1910</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="107">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1909</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="108">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1908</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="109">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1907</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="110">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1906</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="111">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1905</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="112">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1904</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="113">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1903</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="114">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1902</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="115">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1901</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="116">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1900</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="117">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1899</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="118">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1898</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="119">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1897</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="120">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1896</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="121">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1895</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="122">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1894</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="123">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1893</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="124">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1892</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="125">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1891</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="126">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1890</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="127">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1888</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="128">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1887</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="129">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1886</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="130">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1885</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="131">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1884</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="132">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1883</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="133">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1882</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="134">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1881</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="135">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1880</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="136">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1879</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="137">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1878</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="138">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1874</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="139">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1873</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="140">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1872</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="141">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1994</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="142">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1820</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="143">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1819</LogInspectionRuleMetadataID>
			<Value>120</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="144">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1818</LogInspectionRuleMetadataID>
			<Value>10</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="145">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1817</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="146">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1816</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="147">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1815</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="148">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1814</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="149">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1813</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="150">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1812</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="151">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1811</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="152">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1810</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="153">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1809</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="154">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1808</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="155">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1807</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="156">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1806</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="157">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1805</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="158">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1804</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="159">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1803</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="160">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1802</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="161">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1801</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="162">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1800</LogInspectionRuleMetadataID>
			<Value>10</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="163">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1799</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="164">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1798</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="165">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1797</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="166">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1796</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="167">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1795</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="168">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1794</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="169">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1793</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="170">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1792</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="171">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1791</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="172">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1790</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="173">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1789</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="174">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1788</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="175">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1787</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="176">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1786</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="177">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1785</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="178">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1784</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="179">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1783</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="180">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1782</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="181">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1781</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="182">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1780</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="183">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1779</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="184">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1778</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="185">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1777</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="186">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1776</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="187">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1775</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="188">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1774</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="189">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1773</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="190">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1772</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="191">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1771</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="192">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1770</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="193">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1769</LogInspectionRuleMetadataID>
			<Value>120</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="194">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1768</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="195">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1767</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="196">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1766</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="197">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1765</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="198">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1764</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="199">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1763</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="200">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1762</LogInspectionRuleMetadataID>
			<Value>6</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="201">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1761</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="202">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1760</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="203">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1759</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="204">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1758</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="205">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1757</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="206">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1756</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="207">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1755</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="208">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1754</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="209">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1753</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="210">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1752</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="211">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1751</LogInspectionRuleMetadataID>
			<Value>-1</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="212">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1750</LogInspectionRuleMetadataID>
			<Value>eventlog</Value>
		</LogInspectionRuleMetadataOverride>
		<LogInspectionRuleMetadataOverride id="213">
			<SecurityProfileID>10</SecurityProfileID>
			<HostID isNull="true"/>
			<LogInspectionRuleMetadataID>1749</LogInspectionRuleMetadataID>
			<Value>System,Application,Security,Directory Service,File Replication Service</Value>
		</LogInspectionRuleMetadataOverride>
	</LogInspectionRuleMetadataOverrides>
	<SecurityProfileLogInspectionRules>
		<SecurityProfileLogInspectionRule isBridge="true" id="65">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<LogInspectionRuleID>48</LogInspectionRuleID>
		</SecurityProfileLogInspectionRule>
		<SecurityProfileLogInspectionRule isBridge="true" id="66">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<LogInspectionRuleID>29</LogInspectionRuleID>
		</SecurityProfileLogInspectionRule>
		<SecurityProfileLogInspectionRule isBridge="true" id="67">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<LogInspectionRuleID>46</LogInspectionRuleID>
		</SecurityProfileLogInspectionRule>
		<SecurityProfileLogInspectionRule isBridge="true" id="68">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<LogInspectionRuleID>31</LogInspectionRuleID>
		</SecurityProfileLogInspectionRule>
		<SecurityProfileLogInspectionRule isBridge="true" id="69">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<LogInspectionRuleID>56</LogInspectionRuleID>
		</SecurityProfileLogInspectionRule>
		<SecurityProfileLogInspectionRule isBridge="true" id="70">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<LogInspectionRuleID>57</LogInspectionRuleID>
		</SecurityProfileLogInspectionRule>
		<SecurityProfileLogInspectionRule isBridge="true" id="71">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<LogInspectionRuleID>59</LogInspectionRuleID>
		</SecurityProfileLogInspectionRule>
		<SecurityProfileLogInspectionRule isBridge="true" id="72">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<LogInspectionRuleID>61</LogInspectionRuleID>
		</SecurityProfileLogInspectionRule>
		<SecurityProfileLogInspectionRule isBridge="true" id="73">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<LogInspectionRuleID>50</LogInspectionRuleID>
		</SecurityProfileLogInspectionRule>
		<SecurityProfileLogInspectionRule isBridge="true" id="74">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<LogInspectionRuleID>63</LogInspectionRuleID>
		</SecurityProfileLogInspectionRule>
		<SecurityProfileLogInspectionRule isBridge="true" id="75">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<LogInspectionRuleID>20</LogInspectionRuleID>
		</SecurityProfileLogInspectionRule>
		<SecurityProfileLogInspectionRule isBridge="true" id="76">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<LogInspectionRuleID>30</LogInspectionRuleID>
		</SecurityProfileLogInspectionRule>
		<SecurityProfileLogInspectionRule isBridge="true" id="77">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<LogInspectionRuleID>47</LogInspectionRuleID>
		</SecurityProfileLogInspectionRule>
		<SecurityProfileLogInspectionRule isBridge="true" id="78">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<LogInspectionRuleID>40</LogInspectionRuleID>
		</SecurityProfileLogInspectionRule>
		<SecurityProfileLogInspectionRule isBridge="true" id="79">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<LogInspectionRuleID>60</LogInspectionRuleID>
		</SecurityProfileLogInspectionRule>
		<SecurityProfileLogInspectionRule isBridge="true" id="80">
			<TBUID></TBUID>
			<SecurityProfileID>10</SecurityProfileID>
			<LogInspectionRuleID>62</LogInspectionRuleID>
		</SecurityProfileLogInspectionRule>
	</SecurityProfileLogInspectionRules>
	<AdvancedSettings>
		<SecurityProfileSettings id="10">
			<Setting name="settings.configuration.agentHardening" value="true"/>
			<Setting name="com.trendmicro.ds.loginspection:settings.configuration.logInspectionState" value="0"/>
			<Setting name="com.trendmicro.ds.integrity:settings.configuration.systemIntegrityState.on" value="true"/>
			<Setting name="com.trendmicro.ds.integrity:settings.configuration.systemIntegrityState" value="0"/>
			<Setting name="com.trendmicro.ds.loginspection:settings.configuration.logInspectionStorageClip" value="0"/>
			<Setting name="com.trendmicro.ds.loginspection:settings.configuration.logInspectionSyslogClip" value="0"/>
			<Setting name="com.trendmicro.ds.network:settings.configuration.packet.driver.settingsEnabled" value="false"/>
			<Setting name="com.trendmicro.ds.network:settings.configuration.networkDriverMode" value="1"/>
			<Setting name="settings.configuration.agentHardeningPasswordFlag" value="false"/>
			<Setting name="settings.configuration.defaultHeartbeatPeriod" value="1"/>
		</SecurityProfileSettings>
	</AdvancedSettings>
</Export>