Detected presence of files containing domains used for intercepting and inspecting HTTP requests. (x17)

Detected presence of malicious files through analyst-vetted file reputation. (x36)

Detected presence of files with behaviors commonly used by malicious software. (x17)