config.xml

<?xml version="1.0" encoding="utf-8" ?>
<Configuration>
  <Rules>
    <Rule>
      <Name>Web Request</Name>
      <Conditions>
        <Condition>
          <Property>command</Property>
          <Operator>contains</Operator>
          <Value>webrequest</Value>
        </Condition>
        <Condition>
          <Property>command</Property>
          <Operator>contains</Operator>
          <Value>invoke</Value>
        </Condition>
      </Conditions>
      <Actions>
        <ActionRef>
          <Name>File</Name>
        </ActionRef>
      </Actions>
    </Rule>
  </Rules>
  <Actions>
    <Action>
      <Name>File</Name>
      <Type>File</Type>
      <Settings>
        <Setting>
          <Name>Path</Name>
          <Value>%temp%\test.txt</Value>
        </Setting>
        <Setting>
          <Name>Format</Name>
          <Value>{appname},{rule}</Value>
        </Setting>
      </Settings>
    </Action>
    <Action>
      <Name>Block</Name>
      <Type>Block</Type>
    </Action>
  </Actions>
  <License>
    <Terms>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</Terms>
    <Signature>5uOJQ5lj1PXWpMlGIVv3IryDsfZxizTVVOzRe1leQd2zYiodK+sH2Q==</Signature>
  </License>
</Configuration>