index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("1e6349278b4dce2d371db2fc32003b56f17496397d314a89dc9295a68ae56e53","833b989db37dc56b3d7aa24f3ee9e00216f6822818925558c64f074741c1bfd8","41774276e569321880aed02b5a322704b14f638b0d0e3a9ed1a5791a1de905db","eb00cf315c0cc2aa881e1324f990cc21f822ee4b4a22a74b128aad6bae5bb971","0854a2cb1b070de812b8178d77e27c60ae4e53cdcb19b746edafe22de73dc28a","f0db47fa28cec7de46a3844994756f71c23e7a5ebef5d5aae14763a4edfcf342","3f37cb419bdf15a82d69f3b2135eb8185db34dc46e8eacb7f3b9069e95e98858","13d6c512ba9e07061bb1542bb92bec845b37adc955bea5dccd6d7833d2230ff2","ec99847769c374416b17e003804202f4e13175eb4631294b00d3c5ad0e592a29","2f778f905eae2472334055244d050bb866ffb5ebe4371ed1558241e93fee12c4")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("1e6349278b4dce2d371db2fc32003b56f17496397d314a89dc9295a68ae56e53","833b989db37dc56b3d7aa24f3ee9e00216f6822818925558c64f074741c1bfd8","41774276e569321880aed02b5a322704b14f638b0d0e3a9ed1a5791a1de905db","eb00cf315c0cc2aa881e1324f990cc21f822ee4b4a22a74b128aad6bae5bb971","0854a2cb1b070de812b8178d77e27c60ae4e53cdcb19b746edafe22de73dc28a","f0db47fa28cec7de46a3844994756f71c23e7a5ebef5d5aae14763a4edfcf342","3f37cb419bdf15a82d69f3b2135eb8185db34dc46e8eacb7f3b9069e95e98858","13d6c512ba9e07061bb1542bb92bec845b37adc955bea5dccd6d7833d2230ff2","ec99847769c374416b17e003804202f4e13175eb4631294b00d3c5ad0e592a29","2f778f905eae2472334055244d050bb866ffb5ebe4371ed1558241e93fee12c4")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("1e6349278b4dce2d371db2fc32003b56f17496397d314a89dc9295a68ae56e53","833b989db37dc56b3d7aa24f3ee9e00216f6822818925558c64f074741c1bfd8","41774276e569321880aed02b5a322704b14f638b0d0e3a9ed1a5791a1de905db","eb00cf315c0cc2aa881e1324f990cc21f822ee4b4a22a74b128aad6bae5bb971","0854a2cb1b070de812b8178d77e27c60ae4e53cdcb19b746edafe22de73dc28a","f0db47fa28cec7de46a3844994756f71c23e7a5ebef5d5aae14763a4edfcf342","3f37cb419bdf15a82d69f3b2135eb8185db34dc46e8eacb7f3b9069e95e98858","13d6c512ba9e07061bb1542bb92bec845b37adc955bea5dccd6d7833d2230ff2","ec99847769c374416b17e003804202f4e13175eb4631294b00d3c5ad0e592a29","2f778f905eae2472334055244d050bb866ffb5ebe4371ed1558241e93fee12c4")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("1e6349278b4dce2d371db2fc32003b56f17496397d314a89dc9295a68ae56e53","833b989db37dc56b3d7aa24f3ee9e00216f6822818925558c64f074741c1bfd8","41774276e569321880aed02b5a322704b14f638b0d0e3a9ed1a5791a1de905db","eb00cf315c0cc2aa881e1324f990cc21f822ee4b4a22a74b128aad6bae5bb971","0854a2cb1b070de812b8178d77e27c60ae4e53cdcb19b746edafe22de73dc28a","f0db47fa28cec7de46a3844994756f71c23e7a5ebef5d5aae14763a4edfcf342","3f37cb419bdf15a82d69f3b2135eb8185db34dc46e8eacb7f3b9069e95e98858","13d6c512ba9e07061bb1542bb92bec845b37adc955bea5dccd6d7833d2230ff2","ec99847769c374416b17e003804202f4e13175eb4631294b00d3c5ad0e592a29","2f778f905eae2472334055244d050bb866ffb5ebe4371ed1558241e93fee12c4")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("1e6349278b4dce2d371db2fc32003b56f17496397d314a89dc9295a68ae56e53","833b989db37dc56b3d7aa24f3ee9e00216f6822818925558c64f074741c1bfd8","41774276e569321880aed02b5a322704b14f638b0d0e3a9ed1a5791a1de905db","eb00cf315c0cc2aa881e1324f990cc21f822ee4b4a22a74b128aad6bae5bb971","0854a2cb1b070de812b8178d77e27c60ae4e53cdcb19b746edafe22de73dc28a","f0db47fa28cec7de46a3844994756f71c23e7a5ebef5d5aae14763a4edfcf342","3f37cb419bdf15a82d69f3b2135eb8185db34dc46e8eacb7f3b9069e95e98858","13d6c512ba9e07061bb1542bb92bec845b37adc955bea5dccd6d7833d2230ff2","ec99847769c374416b17e003804202f4e13175eb4631294b00d3c5ad0e592a29","2f778f905eae2472334055244d050bb866ffb5ebe4371ed1558241e93fee12c4")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("1e6349278b4dce2d371db2fc32003b56f17496397d314a89dc9295a68ae56e53","833b989db37dc56b3d7aa24f3ee9e00216f6822818925558c64f074741c1bfd8","41774276e569321880aed02b5a322704b14f638b0d0e3a9ed1a5791a1de905db","eb00cf315c0cc2aa881e1324f990cc21f822ee4b4a22a74b128aad6bae5bb971","0854a2cb1b070de812b8178d77e27c60ae4e53cdcb19b746edafe22de73dc28a","f0db47fa28cec7de46a3844994756f71c23e7a5ebef5d5aae14763a4edfcf342","3f37cb419bdf15a82d69f3b2135eb8185db34dc46e8eacb7f3b9069e95e98858","13d6c512ba9e07061bb1542bb92bec845b37adc955bea5dccd6d7833d2230ff2","ec99847769c374416b17e003804202f4e13175eb4631294b00d3c5ad0e592a29","2f778f905eae2472334055244d050bb866ffb5ebe4371ed1558241e93fee12c4")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("1e6349278b4dce2d371db2fc32003b56f17496397d314a89dc9295a68ae56e53","833b989db37dc56b3d7aa24f3ee9e00216f6822818925558c64f074741c1bfd8","41774276e569321880aed02b5a322704b14f638b0d0e3a9ed1a5791a1de905db","eb00cf315c0cc2aa881e1324f990cc21f822ee4b4a22a74b128aad6bae5bb971","0854a2cb1b070de812b8178d77e27c60ae4e53cdcb19b746edafe22de73dc28a","f0db47fa28cec7de46a3844994756f71c23e7a5ebef5d5aae14763a4edfcf342","3f37cb419bdf15a82d69f3b2135eb8185db34dc46e8eacb7f3b9069e95e98858","13d6c512ba9e07061bb1542bb92bec845b37adc955bea5dccd6d7833d2230ff2","ec99847769c374416b17e003804202f4e13175eb4631294b00d3c5ad0e592a29","2f778f905eae2472334055244d050bb866ffb5ebe4371ed1558241e93fee12c4")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("1e6349278b4dce2d371db2fc32003b56f17496397d314a89dc9295a68ae56e53","833b989db37dc56b3d7aa24f3ee9e00216f6822818925558c64f074741c1bfd8","41774276e569321880aed02b5a322704b14f638b0d0e3a9ed1a5791a1de905db","eb00cf315c0cc2aa881e1324f990cc21f822ee4b4a22a74b128aad6bae5bb971","0854a2cb1b070de812b8178d77e27c60ae4e53cdcb19b746edafe22de73dc28a","f0db47fa28cec7de46a3844994756f71c23e7a5ebef5d5aae14763a4edfcf342","3f37cb419bdf15a82d69f3b2135eb8185db34dc46e8eacb7f3b9069e95e98858","13d6c512ba9e07061bb1542bb92bec845b37adc955bea5dccd6d7833d2230ff2","ec99847769c374416b17e003804202f4e13175eb4631294b00d3c5ad0e592a29","2f778f905eae2472334055244d050bb866ffb5ebe4371ed1558241e93fee12c4")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("1e6349278b4dce2d371db2fc32003b56f17496397d314a89dc9295a68ae56e53","833b989db37dc56b3d7aa24f3ee9e00216f6822818925558c64f074741c1bfd8","41774276e569321880aed02b5a322704b14f638b0d0e3a9ed1a5791a1de905db","eb00cf315c0cc2aa881e1324f990cc21f822ee4b4a22a74b128aad6bae5bb971","0854a2cb1b070de812b8178d77e27c60ae4e53cdcb19b746edafe22de73dc28a","f0db47fa28cec7de46a3844994756f71c23e7a5ebef5d5aae14763a4edfcf342","3f37cb419bdf15a82d69f3b2135eb8185db34dc46e8eacb7f3b9069e95e98858","13d6c512ba9e07061bb1542bb92bec845b37adc955bea5dccd6d7833d2230ff2","ec99847769c374416b17e003804202f4e13175eb4631294b00d3c5ad0e592a29","2f778f905eae2472334055244d050bb866ffb5ebe4371ed1558241e93fee12c4")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("1e6349278b4dce2d371db2fc32003b56f17496397d314a89dc9295a68ae56e53","833b989db37dc56b3d7aa24f3ee9e00216f6822818925558c64f074741c1bfd8","41774276e569321880aed02b5a322704b14f638b0d0e3a9ed1a5791a1de905db","eb00cf315c0cc2aa881e1324f990cc21f822ee4b4a22a74b128aad6bae5bb971","0854a2cb1b070de812b8178d77e27c60ae4e53cdcb19b746edafe22de73dc28a","f0db47fa28cec7de46a3844994756f71c23e7a5ebef5d5aae14763a4edfcf342","3f37cb419bdf15a82d69f3b2135eb8185db34dc46e8eacb7f3b9069e95e98858","13d6c512ba9e07061bb1542bb92bec845b37adc955bea5dccd6d7833d2230ff2","ec99847769c374416b17e003804202f4e13175eb4631294b00d3c5ad0e592a29","2f778f905eae2472334055244d050bb866ffb5ebe4371ed1558241e93fee12c4")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("1e6349278b4dce2d371db2fc32003b56f17496397d314a89dc9295a68ae56e53","833b989db37dc56b3d7aa24f3ee9e00216f6822818925558c64f074741c1bfd8","41774276e569321880aed02b5a322704b14f638b0d0e3a9ed1a5791a1de905db","eb00cf315c0cc2aa881e1324f990cc21f822ee4b4a22a74b128aad6bae5bb971","0854a2cb1b070de812b8178d77e27c60ae4e53cdcb19b746edafe22de73dc28a","f0db47fa28cec7de46a3844994756f71c23e7a5ebef5d5aae14763a4edfcf342","3f37cb419bdf15a82d69f3b2135eb8185db34dc46e8eacb7f3b9069e95e98858","13d6c512ba9e07061bb1542bb92bec845b37adc955bea5dccd6d7833d2230ff2","ec99847769c374416b17e003804202f4e13175eb4631294b00d3c5ad0e592a29","2f778f905eae2472334055244d050bb866ffb5ebe4371ed1558241e93fee12c4")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("1e6349278b4dce2d371db2fc32003b56f17496397d314a89dc9295a68ae56e53","833b989db37dc56b3d7aa24f3ee9e00216f6822818925558c64f074741c1bfd8","41774276e569321880aed02b5a322704b14f638b0d0e3a9ed1a5791a1de905db","eb00cf315c0cc2aa881e1324f990cc21f822ee4b4a22a74b128aad6bae5bb971","0854a2cb1b070de812b8178d77e27c60ae4e53cdcb19b746edafe22de73dc28a","f0db47fa28cec7de46a3844994756f71c23e7a5ebef5d5aae14763a4edfcf342","3f37cb419bdf15a82d69f3b2135eb8185db34dc46e8eacb7f3b9069e95e98858","13d6c512ba9e07061bb1542bb92bec845b37adc955bea5dccd6d7833d2230ff2","ec99847769c374416b17e003804202f4e13175eb4631294b00d3c5ad0e592a29","2f778f905eae2472334055244d050bb866ffb5ebe4371ed1558241e93fee12c4")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("1e6349278b4dce2d371db2fc32003b56f17496397d314a89dc9295a68ae56e53","833b989db37dc56b3d7aa24f3ee9e00216f6822818925558c64f074741c1bfd8","41774276e569321880aed02b5a322704b14f638b0d0e3a9ed1a5791a1de905db","eb00cf315c0cc2aa881e1324f990cc21f822ee4b4a22a74b128aad6bae5bb971","0854a2cb1b070de812b8178d77e27c60ae4e53cdcb19b746edafe22de73dc28a","f0db47fa28cec7de46a3844994756f71c23e7a5ebef5d5aae14763a4edfcf342","3f37cb419bdf15a82d69f3b2135eb8185db34dc46e8eacb7f3b9069e95e98858","13d6c512ba9e07061bb1542bb92bec845b37adc955bea5dccd6d7833d2230ff2","ec99847769c374416b17e003804202f4e13175eb4631294b00d3c5ad0e592a29","2f778f905eae2472334055244d050bb866ffb5ebe4371ed1558241e93fee12c4")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("1e6349278b4dce2d371db2fc32003b56f17496397d314a89dc9295a68ae56e53","833b989db37dc56b3d7aa24f3ee9e00216f6822818925558c64f074741c1bfd8","41774276e569321880aed02b5a322704b14f638b0d0e3a9ed1a5791a1de905db","eb00cf315c0cc2aa881e1324f990cc21f822ee4b4a22a74b128aad6bae5bb971","0854a2cb1b070de812b8178d77e27c60ae4e53cdcb19b746edafe22de73dc28a","f0db47fa28cec7de46a3844994756f71c23e7a5ebef5d5aae14763a4edfcf342","3f37cb419bdf15a82d69f3b2135eb8185db34dc46e8eacb7f3b9069e95e98858","13d6c512ba9e07061bb1542bb92bec845b37adc955bea5dccd6d7833d2230ff2","ec99847769c374416b17e003804202f4e13175eb4631294b00d3c5ad0e592a29","2f778f905eae2472334055244d050bb866ffb5ebe4371ed1558241e93fee12c4")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("1e6349278b4dce2d371db2fc32003b56f17496397d314a89dc9295a68ae56e53","833b989db37dc56b3d7aa24f3ee9e00216f6822818925558c64f074741c1bfd8","41774276e569321880aed02b5a322704b14f638b0d0e3a9ed1a5791a1de905db","eb00cf315c0cc2aa881e1324f990cc21f822ee4b4a22a74b128aad6bae5bb971","0854a2cb1b070de812b8178d77e27c60ae4e53cdcb19b746edafe22de73dc28a","f0db47fa28cec7de46a3844994756f71c23e7a5ebef5d5aae14763a4edfcf342","3f37cb419bdf15a82d69f3b2135eb8185db34dc46e8eacb7f3b9069e95e98858","13d6c512ba9e07061bb1542bb92bec845b37adc955bea5dccd6d7833d2230ff2","ec99847769c374416b17e003804202f4e13175eb4631294b00d3c5ad0e592a29","2f778f905eae2472334055244d050bb866ffb5ebe4371ed1558241e93fee12c4")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("1e6349278b4dce2d371db2fc32003b56f17496397d314a89dc9295a68ae56e53","833b989db37dc56b3d7aa24f3ee9e00216f6822818925558c64f074741c1bfd8","41774276e569321880aed02b5a322704b14f638b0d0e3a9ed1a5791a1de905db","eb00cf315c0cc2aa881e1324f990cc21f822ee4b4a22a74b128aad6bae5bb971","0854a2cb1b070de812b8178d77e27c60ae4e53cdcb19b746edafe22de73dc28a","f0db47fa28cec7de46a3844994756f71c23e7a5ebef5d5aae14763a4edfcf342","3f37cb419bdf15a82d69f3b2135eb8185db34dc46e8eacb7f3b9069e95e98858","13d6c512ba9e07061bb1542bb92bec845b37adc955bea5dccd6d7833d2230ff2","ec99847769c374416b17e003804202f4e13175eb4631294b00d3c5ad0e592a29","2f778f905eae2472334055244d050bb866ffb5ebe4371ed1558241e93fee12c4")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("1e6349278b4dce2d371db2fc32003b56f17496397d314a89dc9295a68ae56e53","833b989db37dc56b3d7aa24f3ee9e00216f6822818925558c64f074741c1bfd8","41774276e569321880aed02b5a322704b14f638b0d0e3a9ed1a5791a1de905db","eb00cf315c0cc2aa881e1324f990cc21f822ee4b4a22a74b128aad6bae5bb971","0854a2cb1b070de812b8178d77e27c60ae4e53cdcb19b746edafe22de73dc28a","f0db47fa28cec7de46a3844994756f71c23e7a5ebef5d5aae14763a4edfcf342","3f37cb419bdf15a82d69f3b2135eb8185db34dc46e8eacb7f3b9069e95e98858","13d6c512ba9e07061bb1542bb92bec845b37adc955bea5dccd6d7833d2230ff2","ec99847769c374416b17e003804202f4e13175eb4631294b00d3c5ad0e592a29","2f778f905eae2472334055244d050bb866ffb5ebe4371ed1558241e93fee12c4")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("1e6349278b4dce2d371db2fc32003b56f17496397d314a89dc9295a68ae56e53","833b989db37dc56b3d7aa24f3ee9e00216f6822818925558c64f074741c1bfd8","41774276e569321880aed02b5a322704b14f638b0d0e3a9ed1a5791a1de905db","eb00cf315c0cc2aa881e1324f990cc21f822ee4b4a22a74b128aad6bae5bb971","0854a2cb1b070de812b8178d77e27c60ae4e53cdcb19b746edafe22de73dc28a","f0db47fa28cec7de46a3844994756f71c23e7a5ebef5d5aae14763a4edfcf342","3f37cb419bdf15a82d69f3b2135eb8185db34dc46e8eacb7f3b9069e95e98858","13d6c512ba9e07061bb1542bb92bec845b37adc955bea5dccd6d7833d2230ff2","ec99847769c374416b17e003804202f4e13175eb4631294b00d3c5ad0e592a29","2f778f905eae2472334055244d050bb866ffb5ebe4371ed1558241e93fee12c4")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("1e6349278b4dce2d371db2fc32003b56f17496397d314a89dc9295a68ae56e53","833b989db37dc56b3d7aa24f3ee9e00216f6822818925558c64f074741c1bfd8","41774276e569321880aed02b5a322704b14f638b0d0e3a9ed1a5791a1de905db","eb00cf315c0cc2aa881e1324f990cc21f822ee4b4a22a74b128aad6bae5bb971","0854a2cb1b070de812b8178d77e27c60ae4e53cdcb19b746edafe22de73dc28a","f0db47fa28cec7de46a3844994756f71c23e7a5ebef5d5aae14763a4edfcf342","3f37cb419bdf15a82d69f3b2135eb8185db34dc46e8eacb7f3b9069e95e98858","13d6c512ba9e07061bb1542bb92bec845b37adc955bea5dccd6d7833d2230ff2","ec99847769c374416b17e003804202f4e13175eb4631294b00d3c5ad0e592a29","2f778f905eae2472334055244d050bb866ffb5ebe4371ed1558241e93fee12c4")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("1e6349278b4dce2d371db2fc32003b56f17496397d314a89dc9295a68ae56e53","833b989db37dc56b3d7aa24f3ee9e00216f6822818925558c64f074741c1bfd8","41774276e569321880aed02b5a322704b14f638b0d0e3a9ed1a5791a1de905db","eb00cf315c0cc2aa881e1324f990cc21f822ee4b4a22a74b128aad6bae5bb971","0854a2cb1b070de812b8178d77e27c60ae4e53cdcb19b746edafe22de73dc28a","f0db47fa28cec7de46a3844994756f71c23e7a5ebef5d5aae14763a4edfcf342","3f37cb419bdf15a82d69f3b2135eb8185db34dc46e8eacb7f3b9069e95e98858","13d6c512ba9e07061bb1542bb92bec845b37adc955bea5dccd6d7833d2230ff2","ec99847769c374416b17e003804202f4e13175eb4631294b00d3c5ad0e592a29","2f778f905eae2472334055244d050bb866ffb5ebe4371ed1558241e93fee12c4")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("1e6349278b4dce2d371db2fc32003b56f17496397d314a89dc9295a68ae56e53","833b989db37dc56b3d7aa24f3ee9e00216f6822818925558c64f074741c1bfd8","41774276e569321880aed02b5a322704b14f638b0d0e3a9ed1a5791a1de905db","eb00cf315c0cc2aa881e1324f990cc21f822ee4b4a22a74b128aad6bae5bb971","0854a2cb1b070de812b8178d77e27c60ae4e53cdcb19b746edafe22de73dc28a","f0db47fa28cec7de46a3844994756f71c23e7a5ebef5d5aae14763a4edfcf342","3f37cb419bdf15a82d69f3b2135eb8185db34dc46e8eacb7f3b9069e95e98858","13d6c512ba9e07061bb1542bb92bec845b37adc955bea5dccd6d7833d2230ff2","ec99847769c374416b17e003804202f4e13175eb4631294b00d3c5ad0e592a29","2f778f905eae2472334055244d050bb866ffb5ebe4371ed1558241e93fee12c4")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("1e6349278b4dce2d371db2fc32003b56f17496397d314a89dc9295a68ae56e53","833b989db37dc56b3d7aa24f3ee9e00216f6822818925558c64f074741c1bfd8","41774276e569321880aed02b5a322704b14f638b0d0e3a9ed1a5791a1de905db","eb00cf315c0cc2aa881e1324f990cc21f822ee4b4a22a74b128aad6bae5bb971","0854a2cb1b070de812b8178d77e27c60ae4e53cdcb19b746edafe22de73dc28a","f0db47fa28cec7de46a3844994756f71c23e7a5ebef5d5aae14763a4edfcf342","3f37cb419bdf15a82d69f3b2135eb8185db34dc46e8eacb7f3b9069e95e98858","13d6c512ba9e07061bb1542bb92bec845b37adc955bea5dccd6d7833d2230ff2","ec99847769c374416b17e003804202f4e13175eb4631294b00d3c5ad0e592a29","2f778f905eae2472334055244d050bb866ffb5ebe4371ed1558241e93fee12c4")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("1e6349278b4dce2d371db2fc32003b56f17496397d314a89dc9295a68ae56e53","833b989db37dc56b3d7aa24f3ee9e00216f6822818925558c64f074741c1bfd8","41774276e569321880aed02b5a322704b14f638b0d0e3a9ed1a5791a1de905db","eb00cf315c0cc2aa881e1324f990cc21f822ee4b4a22a74b128aad6bae5bb971","0854a2cb1b070de812b8178d77e27c60ae4e53cdcb19b746edafe22de73dc28a","f0db47fa28cec7de46a3844994756f71c23e7a5ebef5d5aae14763a4edfcf342","3f37cb419bdf15a82d69f3b2135eb8185db34dc46e8eacb7f3b9069e95e98858","13d6c512ba9e07061bb1542bb92bec845b37adc955bea5dccd6d7833d2230ff2","ec99847769c374416b17e003804202f4e13175eb4631294b00d3c5ad0e592a29","2f778f905eae2472334055244d050bb866ffb5ebe4371ed1558241e93fee12c4")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("1e6349278b4dce2d371db2fc32003b56f17496397d314a89dc9295a68ae56e53","833b989db37dc56b3d7aa24f3ee9e00216f6822818925558c64f074741c1bfd8","41774276e569321880aed02b5a322704b14f638b0d0e3a9ed1a5791a1de905db","eb00cf315c0cc2aa881e1324f990cc21f822ee4b4a22a74b128aad6bae5bb971","0854a2cb1b070de812b8178d77e27c60ae4e53cdcb19b746edafe22de73dc28a","f0db47fa28cec7de46a3844994756f71c23e7a5ebef5d5aae14763a4edfcf342","3f37cb419bdf15a82d69f3b2135eb8185db34dc46e8eacb7f3b9069e95e98858","13d6c512ba9e07061bb1542bb92bec845b37adc955bea5dccd6d7833d2230ff2","ec99847769c374416b17e003804202f4e13175eb4631294b00d3c5ad0e592a29","2f778f905eae2472334055244d050bb866ffb5ebe4371ed1558241e93fee12c4")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("1e6349278b4dce2d371db2fc32003b56f17496397d314a89dc9295a68ae56e53","833b989db37dc56b3d7aa24f3ee9e00216f6822818925558c64f074741c1bfd8","41774276e569321880aed02b5a322704b14f638b0d0e3a9ed1a5791a1de905db","eb00cf315c0cc2aa881e1324f990cc21f822ee4b4a22a74b128aad6bae5bb971","0854a2cb1b070de812b8178d77e27c60ae4e53cdcb19b746edafe22de73dc28a","f0db47fa28cec7de46a3844994756f71c23e7a5ebef5d5aae14763a4edfcf342","3f37cb419bdf15a82d69f3b2135eb8185db34dc46e8eacb7f3b9069e95e98858","13d6c512ba9e07061bb1542bb92bec845b37adc955bea5dccd6d7833d2230ff2","ec99847769c374416b17e003804202f4e13175eb4631294b00d3c5ad0e592a29","2f778f905eae2472334055244d050bb866ffb5ebe4371ed1558241e93fee12c4")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("1e6349278b4dce2d371db2fc32003b56f17496397d314a89dc9295a68ae56e53","833b989db37dc56b3d7aa24f3ee9e00216f6822818925558c64f074741c1bfd8","41774276e569321880aed02b5a322704b14f638b0d0e3a9ed1a5791a1de905db","eb00cf315c0cc2aa881e1324f990cc21f822ee4b4a22a74b128aad6bae5bb971","0854a2cb1b070de812b8178d77e27c60ae4e53cdcb19b746edafe22de73dc28a","f0db47fa28cec7de46a3844994756f71c23e7a5ebef5d5aae14763a4edfcf342","3f37cb419bdf15a82d69f3b2135eb8185db34dc46e8eacb7f3b9069e95e98858","13d6c512ba9e07061bb1542bb92bec845b37adc955bea5dccd6d7833d2230ff2","ec99847769c374416b17e003804202f4e13175eb4631294b00d3c5ad0e592a29","2f778f905eae2472334055244d050bb866ffb5ebe4371ed1558241e93fee12c4")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("1e6349278b4dce2d371db2fc32003b56f17496397d314a89dc9295a68ae56e53","833b989db37dc56b3d7aa24f3ee9e00216f6822818925558c64f074741c1bfd8","41774276e569321880aed02b5a322704b14f638b0d0e3a9ed1a5791a1de905db","eb00cf315c0cc2aa881e1324f990cc21f822ee4b4a22a74b128aad6bae5bb971","0854a2cb1b070de812b8178d77e27c60ae4e53cdcb19b746edafe22de73dc28a","f0db47fa28cec7de46a3844994756f71c23e7a5ebef5d5aae14763a4edfcf342","3f37cb419bdf15a82d69f3b2135eb8185db34dc46e8eacb7f3b9069e95e98858","13d6c512ba9e07061bb1542bb92bec845b37adc955bea5dccd6d7833d2230ff2","ec99847769c374416b17e003804202f4e13175eb4631294b00d3c5ad0e592a29","2f778f905eae2472334055244d050bb866ffb5ebe4371ed1558241e93fee12c4")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("1e6349278b4dce2d371db2fc32003b56f17496397d314a89dc9295a68ae56e53","833b989db37dc56b3d7aa24f3ee9e00216f6822818925558c64f074741c1bfd8","41774276e569321880aed02b5a322704b14f638b0d0e3a9ed1a5791a1de905db","eb00cf315c0cc2aa881e1324f990cc21f822ee4b4a22a74b128aad6bae5bb971","0854a2cb1b070de812b8178d77e27c60ae4e53cdcb19b746edafe22de73dc28a","f0db47fa28cec7de46a3844994756f71c23e7a5ebef5d5aae14763a4edfcf342","3f37cb419bdf15a82d69f3b2135eb8185db34dc46e8eacb7f3b9069e95e98858","13d6c512ba9e07061bb1542bb92bec845b37adc955bea5dccd6d7833d2230ff2","ec99847769c374416b17e003804202f4e13175eb4631294b00d3c5ad0e592a29","2f778f905eae2472334055244d050bb866ffb5ebe4371ed1558241e93fee12c4")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("1e6349278b4dce2d371db2fc32003b56f17496397d314a89dc9295a68ae56e53","833b989db37dc56b3d7aa24f3ee9e00216f6822818925558c64f074741c1bfd8","41774276e569321880aed02b5a322704b14f638b0d0e3a9ed1a5791a1de905db","eb00cf315c0cc2aa881e1324f990cc21f822ee4b4a22a74b128aad6bae5bb971","0854a2cb1b070de812b8178d77e27c60ae4e53cdcb19b746edafe22de73dc28a","f0db47fa28cec7de46a3844994756f71c23e7a5ebef5d5aae14763a4edfcf342","3f37cb419bdf15a82d69f3b2135eb8185db34dc46e8eacb7f3b9069e95e98858","13d6c512ba9e07061bb1542bb92bec845b37adc955bea5dccd6d7833d2230ff2","ec99847769c374416b17e003804202f4e13175eb4631294b00d3c5ad0e592a29","2f778f905eae2472334055244d050bb866ffb5ebe4371ed1558241e93fee12c4")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("1e6349278b4dce2d371db2fc32003b56f17496397d314a89dc9295a68ae56e53","833b989db37dc56b3d7aa24f3ee9e00216f6822818925558c64f074741c1bfd8","41774276e569321880aed02b5a322704b14f638b0d0e3a9ed1a5791a1de905db","eb00cf315c0cc2aa881e1324f990cc21f822ee4b4a22a74b128aad6bae5bb971","0854a2cb1b070de812b8178d77e27c60ae4e53cdcb19b746edafe22de73dc28a","f0db47fa28cec7de46a3844994756f71c23e7a5ebef5d5aae14763a4edfcf342","3f37cb419bdf15a82d69f3b2135eb8185db34dc46e8eacb7f3b9069e95e98858","13d6c512ba9e07061bb1542bb92bec845b37adc955bea5dccd6d7833d2230ff2","ec99847769c374416b17e003804202f4e13175eb4631294b00d3c5ad0e592a29","2f778f905eae2472334055244d050bb866ffb5ebe4371ed1558241e93fee12c4")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("1e6349278b4dce2d371db2fc32003b56f17496397d314a89dc9295a68ae56e53","833b989db37dc56b3d7aa24f3ee9e00216f6822818925558c64f074741c1bfd8","41774276e569321880aed02b5a322704b14f638b0d0e3a9ed1a5791a1de905db","eb00cf315c0cc2aa881e1324f990cc21f822ee4b4a22a74b128aad6bae5bb971","0854a2cb1b070de812b8178d77e27c60ae4e53cdcb19b746edafe22de73dc28a","f0db47fa28cec7de46a3844994756f71c23e7a5ebef5d5aae14763a4edfcf342","3f37cb419bdf15a82d69f3b2135eb8185db34dc46e8eacb7f3b9069e95e98858","13d6c512ba9e07061bb1542bb92bec845b37adc955bea5dccd6d7833d2230ff2","ec99847769c374416b17e003804202f4e13175eb4631294b00d3c5ad0e592a29","2f778f905eae2472334055244d050bb866ffb5ebe4371ed1558241e93fee12c4")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("1e6349278b4dce2d371db2fc32003b56f17496397d314a89dc9295a68ae56e53","833b989db37dc56b3d7aa24f3ee9e00216f6822818925558c64f074741c1bfd8","41774276e569321880aed02b5a322704b14f638b0d0e3a9ed1a5791a1de905db","eb00cf315c0cc2aa881e1324f990cc21f822ee4b4a22a74b128aad6bae5bb971","0854a2cb1b070de812b8178d77e27c60ae4e53cdcb19b746edafe22de73dc28a","f0db47fa28cec7de46a3844994756f71c23e7a5ebef5d5aae14763a4edfcf342","3f37cb419bdf15a82d69f3b2135eb8185db34dc46e8eacb7f3b9069e95e98858","13d6c512ba9e07061bb1542bb92bec845b37adc955bea5dccd6d7833d2230ff2","ec99847769c374416b17e003804202f4e13175eb4631294b00d3c5ad0e592a29","2f778f905eae2472334055244d050bb866ffb5ebe4371ed1558241e93fee12c4")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("1e6349278b4dce2d371db2fc32003b56f17496397d314a89dc9295a68ae56e53","833b989db37dc56b3d7aa24f3ee9e00216f6822818925558c64f074741c1bfd8","41774276e569321880aed02b5a322704b14f638b0d0e3a9ed1a5791a1de905db","eb00cf315c0cc2aa881e1324f990cc21f822ee4b4a22a74b128aad6bae5bb971","0854a2cb1b070de812b8178d77e27c60ae4e53cdcb19b746edafe22de73dc28a","f0db47fa28cec7de46a3844994756f71c23e7a5ebef5d5aae14763a4edfcf342","3f37cb419bdf15a82d69f3b2135eb8185db34dc46e8eacb7f3b9069e95e98858","13d6c512ba9e07061bb1542bb92bec845b37adc955bea5dccd6d7833d2230ff2","ec99847769c374416b17e003804202f4e13175eb4631294b00d3c5ad0e592a29","2f778f905eae2472334055244d050bb866ffb5ebe4371ed1558241e93fee12c4")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("1e6349278b4dce2d371db2fc32003b56f17496397d314a89dc9295a68ae56e53","833b989db37dc56b3d7aa24f3ee9e00216f6822818925558c64f074741c1bfd8","41774276e569321880aed02b5a322704b14f638b0d0e3a9ed1a5791a1de905db","eb00cf315c0cc2aa881e1324f990cc21f822ee4b4a22a74b128aad6bae5bb971","0854a2cb1b070de812b8178d77e27c60ae4e53cdcb19b746edafe22de73dc28a","f0db47fa28cec7de46a3844994756f71c23e7a5ebef5d5aae14763a4edfcf342","3f37cb419bdf15a82d69f3b2135eb8185db34dc46e8eacb7f3b9069e95e98858","13d6c512ba9e07061bb1542bb92bec845b37adc955bea5dccd6d7833d2230ff2","ec99847769c374416b17e003804202f4e13175eb4631294b00d3c5ad0e592a29","2f778f905eae2472334055244d050bb866ffb5ebe4371ed1558241e93fee12c4")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("1e6349278b4dce2d371db2fc32003b56f17496397d314a89dc9295a68ae56e53","833b989db37dc56b3d7aa24f3ee9e00216f6822818925558c64f074741c1bfd8","41774276e569321880aed02b5a322704b14f638b0d0e3a9ed1a5791a1de905db","eb00cf315c0cc2aa881e1324f990cc21f822ee4b4a22a74b128aad6bae5bb971","0854a2cb1b070de812b8178d77e27c60ae4e53cdcb19b746edafe22de73dc28a","f0db47fa28cec7de46a3844994756f71c23e7a5ebef5d5aae14763a4edfcf342","3f37cb419bdf15a82d69f3b2135eb8185db34dc46e8eacb7f3b9069e95e98858","13d6c512ba9e07061bb1542bb92bec845b37adc955bea5dccd6d7833d2230ff2","ec99847769c374416b17e003804202f4e13175eb4631294b00d3c5ad0e592a29","2f778f905eae2472334055244d050bb866ffb5ebe4371ed1558241e93fee12c4")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("1e6349278b4dce2d371db2fc32003b56f17496397d314a89dc9295a68ae56e53","833b989db37dc56b3d7aa24f3ee9e00216f6822818925558c64f074741c1bfd8","41774276e569321880aed02b5a322704b14f638b0d0e3a9ed1a5791a1de905db","eb00cf315c0cc2aa881e1324f990cc21f822ee4b4a22a74b128aad6bae5bb971","0854a2cb1b070de812b8178d77e27c60ae4e53cdcb19b746edafe22de73dc28a","f0db47fa28cec7de46a3844994756f71c23e7a5ebef5d5aae14763a4edfcf342","3f37cb419bdf15a82d69f3b2135eb8185db34dc46e8eacb7f3b9069e95e98858","13d6c512ba9e07061bb1542bb92bec845b37adc955bea5dccd6d7833d2230ff2","ec99847769c374416b17e003804202f4e13175eb4631294b00d3c5ad0e592a29","2f778f905eae2472334055244d050bb866ffb5ebe4371ed1558241e93fee12c4")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="O365 General" AND requesturl NOT NULL AND requesturl IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="O365 General" AND Message NOT NULL AND Message IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="O365 General" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("http://185.208.159.155:8000/application-ref.jar","https://gh-proxy.com/https://github.com/xmrig/xmrig/releases/download/v6.22.2/xmrig-6.22.2-linux-static-x64.tar.gz","https://gh-proxy.com/https://github.com/trexminer/t-rex/releases/download/0.26.8/t-rex-0.26.8-linux.tar.gz","https://canary.discord.com/api/webhooks/1357293459207356527/grsqv7aqyemzrupb1ysrpustczql4oii-i7ribsqtgs849zy64h7w_-c5uyytrdbzxiq")
