body YOURNAME /\d+\)\s*y+o+u+r+\s*n+a+m+e+/i
describe YOURNAME 1) your name is spam
score YOURNAME 3
+
+# blarson 2008-12-11
+header TWITTER subject =~ /you on Twitter/
+describe TWITTER Twitter invite spam
+score TWITTER 4
+
+# don 2008-12-18
+uri DOS_LIVE_SPACES_CID /^http:\/\/cid-.{10,20}\.spaces\.live\.com\/$/
+describe DOS_LIVE_SPACES_CID live spaces uri
+score DOS_LIVE_SPACES_CID 3
+