{
    "name": "Fireeye",
    "author": "fofa",
    "version": "0.1.0",
    "matches": [
        {
            "search": "headers",
            "text": "fireeye"
        },
        {
            "search": "body",
            "text": "mobsc"
        },
        {
            "search": "body",
            "text": "FireEye"
        }
    ],
    "condition": "0 or (1 and 2)"
}