<?xml version="1.0" encoding="utf-8"?><Rules xmlns="urn:Rules"><Rule RuleId="22002" RuleVersion="11" Target="Upload" Category="O365" xmlns=""><Sources><EtwSource Token="1" EventId="9" ProviderGuid="{1c691e56-cb67-449a-a426-c2fc0ae83736}" /><Filter Token="2"><Operator Type="AND"><Left><Operator Type="OR"><Left><Operator Type="LT"><Left><Source Token="1" Field="type" /></Left><Right><Constant Value="777004" OutType="INT64" /></Right></Operator></Left><Right><Operator Type="GT"><Left><Source Token="1" Field="type" /></Left><Right><Constant Value="777008" OutType="INT64" /></Right></Operator></Right></Operator></Left><Right><Operator Type="AND"><Left><Operator Type="NE"><Left><Source Token="1" Field="id" /></Left><Right><Constant Value="666259" OutType="INT64" /></Right></Operator></Left><Right><Operator Type="NE"><Left><Source Token="1" Field="id" /></Left><Right><Constant Value="666262" OutType="INT64" /></Right></Operator></Right></Operator></Right></Operator></Filter></Sources><Column OutType="FILETIME" Index="0" Nullable="false"><Source Token="2" Field="TimeStamp100ns" /></Column><Column OutType="UINT64" Index="1" Nullable="false"><Source Token="2" Field="id" /></Column><Column OutType="WSTRING" Index="2" Nullable="false"><Source Token="2" Field="correlationId" /></Column><Column OutType="UINT64" Index="3" Nullable="false"><Source Token="2" Field="type" /></Column><Column OutType="WSTRING" Index="4" Nullable="false"><Source Token="2" Field="serverFileId" /></Column><Column OutType="WSTRING" Index="5" Nullable="false"><Source Token="2" Field="details" /></Column><Column OutType="WSTRING" Index="6" Nullable="false"><Source Token="2" Field="futureUse1" /></Column><Column OutType="WSTRING" Index="7" Nullable="false"><Source Token="2" Field="futureUse2" /></Column><Column OutType="WSTRING" Index="8" Nullable="false"><Source Token="2" Field="futureUse3" /></Column><Column OutType="WSTRING" Index="9" Nullable="false"><Source Token="2" Field="futureUse4" /></Column><Column OutType="WSTRING" Index="10" Nullable="false"><Source Token="2" Field="futureUse5" /></Column><Column OutType="WSTRING" Index="11" Nullable="false"><Source Token="2" Field="futureUse6" /></Column><Column OutType="WSTRING" Index="12" Nullable="false"><Source Token="2" Field="futureUse7" /></Column><Column OutType="WSTRING" Index="13" Nullable="false"><Source Token="2" Field="futureUse8" /></Column><Column OutType="WSTRING" Index="14" Nullable="false"><Source Token="2" Field="futureUse9" /></Column><Column OutType="WSTRING" Index="15" Nullable="false"><Source Token="2" Field="futureUse10" /></Column><Triggers><Source Token="2" /></Triggers></Rule></Rules>