EFTA Document EFTA01370227

Rules List Rule Type: userDeened Scheduled :Scheduled Alert Case: Pre:Post end of day : Thor- -.lay. 12 July, 2012 Rale Code Tide! Description Parameters dAcctDayCTR Detects accounts that exceed $10,000 in cash transact:tom per day Detects accomos that exceed S10003 in cash transactions per day Desiped to be run Pre-EOD. (S9.000 price to 9 29 2011) CTP. Amount = '10000' Alert or Case Alert Schedule EstryEOD Evil Time 2re-EOD Schedule Fred Dativ dDorimacct Detects accounts that have been donna= for 12 months then become Month ='12' acme Breaches ='-ALL-' Dem:tiers = •-ALL: Detects accounts that have been dormant for at least 12 =oaths and Threshold; flyer+, = '500 00' become arum rant $500.00 in ormity). Designed to be rum Pre-HOD. Akrt or Case Alen Schedule EveryEOD Esal Time Ple-E0D Schedule Freq Doily Detect deposals followed by official cheat within 2 percent over 7 days Detects customers who had DEPOSITS followed by OFFICIAL CHECKS where the total amounts after by less than or equal to 2 percent within 7 days. Rims Post-ECO. Number of De =7 Pecest = Inbound Amvtry Type = 910Y Outbound Acmity Type ='313' Akrror Cast Alert Schedule Weekly Es al Time Post-E0D Schedule Freq Weekly VelDepPertar Detect Depots followed by Pawn& Checks %Main 2 percent over 7 days Demos automats who had DEPOSITS followed by PERSONAL CHECKS where the tote Amman differ by led than or equal to 2 percent wad= 7 days. Runts PostEOD Number of Days = 7 Perces = Inbound Amway Iype= 9100 Outbound Amity Type ='306' Abet or Case Alert Sdiedele Weekly Evil Time Post-EOD Schedule Freq Weekly VelDepWsre Detect Deposits followed by Ourcome Woes Ale= a 5 percent over 7 days Detects customers who had DEPOSITS followed by OUTGOING WIRES where the total anacmus differ by less than or equal so 5 peter MI= 7 days. Rums Doe-E0D. lOomber of Days es Decent =5' Lebec' Aansty Ines 910Ce Ceatboand AIMS Type =192301 Alert or Case Alert Schedule Weekly Eval Time Post-E0D Schedule Freq Weekly MEMMEigi L Cosprniad Y.jnn. A..w its htlpa ("Learn/ 4 CONFIDENTIAL - PURSUANT TO FED. R. CRIM. P. 6(e) DB-SDNY-0062889 CONFIDENTIAL SDNY_GM_00209073 EFTA01370227