value:
"\b(att&ck|backdoor|blue ?team(ing)?|bootkits?|breach(ed|es)?|bsides|bug ?bount(y|ies)|business ?email ?compromise|cenys|cisa|ciso|(cloud|cyber|computer|network|digital) ?(security|crime|criminals?|attacks?|sec|law|forensics|espionage|threats?|incidents?|intel(igence)?)|cred(ential)?s? ?(harvest|harvested|harvesting|stolen)|cves?|((meta)?data|files?|emails?|documents?|photos?|images?|calls?|voicemails?|texts|sms|recordings?|videos?|cred(ential)?s?) ?(theft|leak(ed)?|stole|compromised?)|ddos|devsec(ops)?|dkim|dmarc|exfil(tration|trates)?|exploits?|extortion ?sites?|firewall|ghidra|hacked|hackers?|ida ?pro|info(rmation)? ?(security|stealer)|infosec(urity)?|iotsec|kali ?linux|kerberoasting|(leak(ed)?|stole(n)?|compromised?) ?((meta)?data|files?|emails?|documents?|photos?|images?|calls?|voicemails?|texts|sms|recordings?|videos?|cred(ential)?s?)|leak ?site|lolbins?|lolbras?|malvertizing|malware|mitre|ncsc|n-?day|opsec|osint|otsec|owasp|password ?spray|patch ?tuesday|pentent(ing)?|(ph|sm|v)ish(ing|er|ers)?|purpleteam|purple ?team(ing)?|ransomware|red ?team(ing)?|remnux|reverse ?engineer(ing)?|rootkits?|security ?awareness|shame[ -]?sites?|shodan|siem|sigma ?rules?|sim ?swap(ing)?|socia(ally)? ?engineer(ing|ed)?|spyware|sql ?injection|suricata|threat ?(actors?|intel(ligence)?)|tor|virus ?total|vulnerabilit(y|ies)|web ?shell|xss|yara|(zero|0)[- ]?day)\b"