KNOWN ISSUE: Rules with multiple conditions falsely alerting based on multiple instances returned