{
  "version": 1,
  "rules": [
    {
      "domain": [
        "aadrm.com",
        "acompli.com",
        "acompli.net",
        "aka.ms",
        "akadns.net",
        "aspnetcdn.com",
        "assets-yammer.com",
        "azure.com",
        "azure.net",
        "azureedge.net",
        "azureiotcentral.com",
        "azurerms.com",
        "bing.com",
        "bing.net",
        "bingapis.com",
        "cloudapp.net",
        "cloudappsecurity.com",
        "edgesuite.net",
        "gfx.ms",
        "hotmail.com",
        "live.com",
        "live.net",
        "lync.com",
        "msappproxy.net",
        "msauth.net",
        "msauthimages.net",
        "msecnd.net",
        "msedge.net",
        "msft.net",
        "msftauth.net",
        "msftauthimages.net",
        "msftidentity.com",
        "msidentity.com",
        "msn.cn",
        "msn.com",
        "msocdn.com",
        "msocsp.com",
        "mstea.ms",
        "o365weve.com",
        "oaspapps.com",
        "office.com",
        "office.net",
        "office365.com",
        "officeppe.net",
        "omniroot.com",
        "onedrive.com",
        "onenote.com",
        "onenote.net",
        "onestore.ms",
        "outlook.com",
        "outlookmobile.com",
        "phonefactor.net",
        "public-trust.com",
        "sfbassets.com",
        "sfx.ms",
        "sharepoint.com",
        "sharepointonline.com",
        "skype.com",
        "skypeassets.com",
        "skypeforbusiness.com",
        "staffhub.ms",
        "svc.ms",
        "sway.com",
        "sway-cdn.com",
        "sway-extensions.com",
        "trafficmanager.net",
        "uservoice.com",
        "virtualearth.net",
        "visualstudio.com",
        "windows.com",
        "windows.net",
        "windows-ppe.net",
        "windowsazure.com",
        "windowsupdate.com",
        "wunderlist.com",
        "yammer.com",
        "yammerusercontent.com"
      ],
      "domain_suffix": [
        ".aadrm.com",
        ".acompli.com",
        ".acompli.net",
        ".aka.ms",
        ".akadns.net",
        ".aspnetcdn.com",
        ".assets-yammer.com",
        ".azure.com",
        ".azure.net",
        ".azureedge.net",
        ".azureiotcentral.com",
        ".azurerms.com",
        ".bing.com",
        ".bing.net",
        ".bingapis.com",
        ".cloudapp.net",
        ".cloudappsecurity.com",
        ".edgesuite.net",
        ".gfx.ms",
        ".hotmail.com",
        ".live.com",
        ".live.net",
        ".lync.com",
        ".msappproxy.net",
        ".msauth.net",
        ".msauthimages.net",
        ".msecnd.net",
        ".msedge.net",
        ".msft.net",
        ".msftauth.net",
        ".msftauthimages.net",
        ".msftidentity.com",
        ".msidentity.com",
        ".msn.cn",
        ".msn.com",
        ".msocdn.com",
        ".msocsp.com",
        ".mstea.ms",
        ".o365weve.com",
        ".oaspapps.com",
        ".office.com",
        ".office.net",
        ".office365.com",
        ".officeppe.net",
        ".omniroot.com",
        ".onedrive.com",
        ".onenote.com",
        ".onenote.net",
        ".onestore.ms",
        ".outlook.com",
        ".outlookmobile.com",
        ".phonefactor.net",
        ".public-trust.com",
        ".sfbassets.com",
        ".sfx.ms",
        ".sharepoint.com",
        ".sharepointonline.com",
        ".skype.com",
        ".skypeassets.com",
        ".skypeforbusiness.com",
        ".staffhub.ms",
        ".svc.ms",
        ".sway.com",
        ".sway-cdn.com",
        ".sway-extensions.com",
        ".trafficmanager.net",
        ".uservoice.com",
        ".virtualearth.net",
        ".visualstudio.com",
        ".windows.com",
        ".windows.net",
        ".windows-ppe.net",
        ".windowsazure.com",
        ".windowsupdate.com",
        ".wunderlist.com",
        ".yammer.com",
        ".yammerusercontent.com"
      ],
      "domain_keyword": [
        "1drv",
        "microsoft"
      ]
    }
  ]
}