payload:  
  # > Microsoft
  - PROCESS-NAME,OneDrive
  - DOMAIN-KEYWORD,onedrive
  - DOMAIN-SUFFIX,azure.com
  - DOMAIN-SUFFIX,fabric.io
  - DOMAIN-SUFFIX,files.1drv.com
  - DOMAIN-SUFFIX,hotmail.com
  - DOMAIN-SUFFIX,live.com
  - DOMAIN-SUFFIX,live.net
  - DOMAIN-SUFFIX,livefilestore.com
  - DOMAIN-SUFFIX,mesh.com
  - DOMAIN-SUFFIX,microsoft.com
  - DOMAIN-SUFFIX,microsoftonline.com
  - DOMAIN-SUFFIX,microsoft-tst.com
  - DOMAIN-SUFFIX,msn.com
  - DOMAIN-SUFFIX,office.com
  - DOMAIN-SUFFIX,office.net
  - DOMAIN-SUFFIX,onedrive.com
  - DOMAIN-SUFFIX,outlook.com
  - DOMAIN-SUFFIX,p.sfx.ms
  - DOMAIN-SUFFIX,s-microsoft.com
  - DOMAIN-SUFFIX,sharepoint.com
  - DOMAIN-SUFFIX,skype.com
  - DOMAIN-SUFFIX,spoprod-a.akamaihd.net
  - DOMAIN-SUFFIX,storage.msn.com