"responseStatus.code":ALLOW ((requestURI:%2fbin%2fash* OR requestURI:%2fbin%2fbash* OR requestURI:%2fbin%2fbusybox* OR requestURI:%2fbin%2fdash* OR requestURI:%2fbin%2fsh* OR requestURI:%2fbin%2fzsh* OR requestURI:\/bin\/ash* OR requestURI:\/bin\/bash* OR requestURI:\/bin\/busybox* OR requestURI:\/bin\/dash* OR requestURI:\/bin\/sh* OR requestURI:\/bin\/zsh* OR requestURI:%2fusr%2fbin%2fcurl* OR requestURI:%2fusr%2fbin%2fkubectl* OR requestURI:%2fusr%2fbin%2fperl* OR requestURI:%2fusr%2fbin%2fpython* OR requestURI:%2fusr%2fbin%2fwget* OR requestURI:\/usr\/bin\/curl* OR requestURI:\/usr\/bin\/kubectl* OR requestURI:\/usr\/bin\/perl* OR requestURI:\/usr\/bin\/python* OR requestURI:\/usr\/bin\/wget*) OR (userAgent:access_matrix* OR userAgent:trufflehog* OR userAgent:azurehound* OR userAgent:micro\-scanner*))