TornadoIDS/ECR "special colors"