I'm looking to essentially create a dictionary of specific domains, that will be used by a content-filter that checks the "Envelope Sender" for a term in the content dictionary, and if it matches to added a CEF Log Entry that can be picked up by our ...