Defend your organization by mimicking real adversarial attacks.
identifier "com.prelude.operator" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = D3C73MWD7Y