# NAME: OneDrive
payload:
  - DOMAIN-SUFFIX,livefilestore.com
  - DOMAIN-SUFFIX,oneclient.sfx.ms
  - DOMAIN-SUFFIX,photos.live.com
  - DOMAIN-SUFFIX,sharepoint.com
  - DOMAIN-SUFFIX,sharepointonline.com
  - DOMAIN-SUFFIX,spoprod-a.akamaihd.net
  - DOMAIN-SUFFIX,storage.live.com
  - DOMAIN-SUFFIX,storage.msn.com
  - DOMAIN-KEYWORD,1drv
  - DOMAIN-KEYWORD,onedrive
  - DOMAIN-KEYWORD,skydrive
  - PROCESS-NAME,onedrive
  - PROCESS-NAME,onedriveupdater