Create a new list for file sharing sites and code repositories and/or create blacklist

I suggest a few more lists are created to separate some of the file sharing and code sharing sites that are currently listed under the "List of known security providers/vendors blog domain" list.

I have a few events where malware is hosted on drive.google.com or raw.githubusercontent.com and it is being flagged as a warning for "List of known security providers/vendors blog domain".

Or maybe create a warning list blacklist that will allow the bulk of the list to work as intended except for the the ones in the blacklist.

My main concern is now that these malicious URLs are marked as being on the warning lists my automation will not pull them since I check the warning lists to prevent false positives. There should be some type of override function.

No file, test, or entry point is named. Start by reviewing how warning-list entries for drive.google.com and raw.githubusercontent.com are organized, then clarify whether the intended outcome is separate lists, a blacklist, or an override; done requires an agreed behavior for these cases.