index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("http://onlinehueplet.com/77_1.exe","https://azilominehostz.xyz/","https://patchlinks.com/","http://137.184.159.42/","http://185.186.142.166/wallet.exe","https://dll1.stdcdn.com/","http://tg8.cllgxx.com/hp8/g1/yrpp1047.exe","http://eurekabike.com/pmzero/design/img/LightCleaner9252839.exe","https://i.xyzgamei.com/gamexyz/2201/random.exe","http://www.sxhxrj.com/askhelp35/askinstall35.exe","https://presstheme.me/","http://remviagra.com/pub1.exe","http://privacy-tools-for-you-782.com/downloads/toolspab2.exe","https://cdn.discordapp.com/attachments/917889480646590537/935966171835031612/Cube_WW6.exe","http://onlinehueplet.com/77_1.exe","https://cdn.discordapp.com/attachments/934006169125679147/943432754161410108/WW19.exe","http://privacy-tools-for-you-791.com/downloads/toolspab1.exe","https://cdn.discordapp.com/attachments/917889480646590537/943130993404018709/Fixtools.exe","http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe","http://104.168.215.231/kde.exe","http://careerguide4u.online/wp-content/plugins/google-analytics-for-wordpress/BlackCleanerSetp521234.exe","https://i.xyzgamei.com/gamexyz/2203/random.exe","http://zenitsu.s3.pl-waw.scw.cloud/pub-summoning/poweroff.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/cpm_pr_vp46up4d6j_.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/updto_bgn64wau5x_date.exe","https://tengenuzui.s3.pl-waw.scw.cloud/makio/handler_wbba4vzm89rxskhs.exe","https://i.xyzgamei.com/gamexyz/25/random.exe","https://v.xyzgamev.com/25.html","https://v.xyzgamev.com/login.html","http://jackytpload.su/campaign6/autosubplayer.exe","https://gc-distribution.biz/pub.php?pub=five","http://www.sxhxrj.com/askhelp42/askinstall42.exe","https://flexnetinformatica.com.br/wp-content/plugins/elementor/assets/LightCleaner2132113.exe","http://stylesheet.faseaegasdfase.com\\/hp8/g1/siww1053.exe","https://source3.boys4dayz.com/installer.exe","https://signaturebusinesspark.com/360/fw3.exe","https://signaturebusinesspark.com/360/fw4.exe","https://signaturebusinesspark.com/360/fw6.exe","https://cdn.discordapp.com/attachments/937783814208491553/937784072967692368/SecondFile.exe","https://v.xyzgamev.com/23.html","https://v.xyzgamev.com/login.html")
index=activity AND rg_functionality="Web Proxy" AND filehash NOT NULL AND filehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Web Proxy" AND oldfilehash NOT NULL AND oldfilehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Web Proxy" AND customstring64 NOT NULL AND customstring64 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Next Generation Firewall" AND filehash NOT NULL AND filehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Next Generation Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring64 NOT NULL AND customstring64 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Flow" AND filehash NOT NULL AND filehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Flow" AND oldfilehash NOT NULL AND oldfilehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Flow" AND customstring64 NOT NULL AND customstring64 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Web Server" AND filehash NOT NULL AND filehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Web Server" AND oldfilehash NOT NULL AND oldfilehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Web Server" AND customstring64 NOT NULL AND customstring64 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Web Application Firewall" AND filehash NOT NULL AND filehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Web Application Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Web Application Firewall" AND customstring64 NOT NULL AND customstring64 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Cloud Application Security Broker" AND filehash NOT NULL AND filehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Cloud Application Security Broker" AND oldfilehash NOT NULL AND oldfilehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring64 NOT NULL AND customstring64 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Source Code Repository" AND filehash NOT NULL AND filehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Source Code Repository" AND oldfilehash NOT NULL AND oldfilehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Source Code Repository" AND customstring64 NOT NULL AND customstring64 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Authentication / VPN" AND filehash NOT NULL AND filehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Authentication / VPN" AND oldfilehash NOT NULL AND oldfilehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Authentication / VPN" AND customstring64 NOT NULL AND customstring64 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Cloud Content Management System" AND filehash NOT NULL AND filehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Cloud Content Management System" AND oldfilehash NOT NULL AND oldfilehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring64 NOT NULL AND customstring64 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Cloud Services / Applications" AND filehash NOT NULL AND filehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Cloud Services / Applications" AND oldfilehash NOT NULL AND oldfilehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring64 NOT NULL AND customstring64 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Web Application Firewall" AND filehash NOT NULL AND filehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Web Application Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Web Application Firewall" AND customstring64 NOT NULL AND customstring64 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND filehash NOT NULL AND filehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND oldfilehash NOT NULL AND oldfilehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring64 NOT NULL AND customstring64 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("98f0556a846f223352da516af66fa1a0","06B31367D65A411B1F2A7B3091FB31D4","584B186152A16161E502816BF990747C","C41A85123AF144790520F502FE190110","5B14369C347439BECACAA0883C07F17B","7E58613DDB2FDD10EED17BBCE5B3E0A9","883403C940B477CEE083EFEEA8C252C6","98F0556A846F223352DA516AF66FA1A0","CEADA3798FD16FAC13F053D0C6F4D198","D91325640F392D33409B8F1B2315B97C","3739256794EBF9BA8C6597A4687C8799","FBD3940D1AD28166D8539EAE23D44D5B","AAEFF1F8E7BD3A81C69C472BCD211A7B","E65BF2D56FCAA18C1A8D0D481072DC62","33F7383C2EB9B20E11E6A149AA62DEA4","79400B1FD740D9CB7EC7C2C2E9A7D618","B8ECEC542A07067A193637269973C2E8","42100BAF34C4B1B0E89F1C2EF94CF8F8","4D75DEA49F6BD60F725FAE9C28CD0960","CC722FD0BD387CF472350DC2DD7DDD1E","4008D7F17A08EFD3FBD18E4E1BA29E00","B2A2F85B4201446B23A250F68051B4DC","4EC312D77817D8FB90403FF87B88D5E3","12DBC75B071077042C097AFD59B2137F","F94BF1734F34665A65A835CC04A4AD95","362592241E15293C68D0F24468723BBB","7875AAB3E23F885DF12FF62D9EF5DB50","B0448525C5A00135BB5B658CC6745574","D5C1C44D19D8D6E8C0F739CAB439E45E","4FEBA8683DAA18545E9F9408E4CD07BD","446119332738133D3ECD2D00EBE5D0EC","5994DE41D8B4ED3BBB4F870A33CB839A","9F8800BF866E944EFB2034EC56ED574E","AC458CABFED224353545707DF966A2BA","AF817AAD791628143019FFDE530D0EF7","2086E25FB651F0A8D713024DE2168B9B","B2620FFE40493FDF9E771BFF3BDCBC44","4DD3F638D4C370ABEB3EBF59CAD8ED2F","CE54B9287C3E4B5733035D0BE085D989","9F1EAA0FF990913F7D4DFD31841DE47A","639DE55E338BFCEA8DAAE727141AF3D1")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Authentication / VPN" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Authentication / VPN" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Authentication / VPN" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Authentication / VPN" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Content Management System" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Content Management System" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Services / Applications" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Services / Applications" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="DNS / DHCP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="DNS / DHCP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="DNS / DHCP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="DNS / DHCP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ads-memory.biz" OR destinationhostname CONTAINS "all-mobile-pa1ments.com.mx" OR destinationhostname CONTAINS "all-smart-green.com" OR destinationhostname CONTAINS "am1420wbec.com/upload/" OR destinationhostname CONTAINS "appwebstat.biz" OR destinationhostname CONTAINS "banhamm.com" OR destinationhostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationhostname CONTAINS "buy-fantasy-gmes.com.sg" OR destinationhostname CONTAINS "connectini.net" OR destinationhostname CONTAINS "dll1.stdcdn.com" OR destinationhostname CONTAINS "dollybuster.at/upload/" OR destinationhostname CONTAINS "egsagl.com/upload/" OR destinationhostname CONTAINS "enter-me.xyz" OR destinationhostname CONTAINS "fennsports.com/upload/" OR destinationhostname CONTAINS "file-coin-host-12.com" OR destinationhostname CONTAINS "ginta.link" OR destinationhostname CONTAINS "hhiuew33.com/check/safe" OR destinationhostname CONTAINS "host-data-coin-11.com" OR destinationhostname CONTAINS "islamic-city.com/upload/" OR destinationhostname CONTAINS "mordo.ru/upload/" OR destinationhostname CONTAINS "nahbleiben.at/upload/" OR destinationhostname CONTAINS "noblecreativeaz.com/upload/" OR destinationhostname CONTAINS "one-wedding-film.com" OR destinationhostname CONTAINS "piratia-life.ru/upload/" OR destinationhostname CONTAINS "presstheme.me" OR destinationhostname CONTAINS "real-enter-solutions.xyz" OR destinationhostname CONTAINS "recmaster.ru/upload/" OR destinationhostname CONTAINS "remik-franchise.ru/upload/" OR destinationhostname CONTAINS "reoseio.com" OR destinationhostname CONTAINS "signaturebusinesspark.com" OR destinationhostname CONTAINS "sovels.ru/upload/" OR destinationhostname CONTAINS "spaldingcompanies.com/upload/" OR destinationhostname CONTAINS "toa.mygametoa.com" OR destinationhostname CONTAINS "topexpertshop.com" OR destinationhostname CONTAINS "topniemannpicksh0p.cc" OR destinationhostname CONTAINS "tvqaq.cn/upload/" OR destinationhostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ads-memory.biz" OR sourcentdomain CONTAINS "all-mobile-pa1ments.com.mx" OR sourcentdomain CONTAINS "all-smart-green.com" OR sourcentdomain CONTAINS "am1420wbec.com/upload/" OR sourcentdomain CONTAINS "appwebstat.biz" OR sourcentdomain CONTAINS "banhamm.com" OR sourcentdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcentdomain CONTAINS "buy-fantasy-gmes.com.sg" OR sourcentdomain CONTAINS "connectini.net" OR sourcentdomain CONTAINS "dll1.stdcdn.com" OR sourcentdomain CONTAINS "dollybuster.at/upload/" OR sourcentdomain CONTAINS "egsagl.com/upload/" OR sourcentdomain CONTAINS "enter-me.xyz" OR sourcentdomain CONTAINS "fennsports.com/upload/" OR sourcentdomain CONTAINS "file-coin-host-12.com" OR sourcentdomain CONTAINS "ginta.link" OR sourcentdomain CONTAINS "hhiuew33.com/check/safe" OR sourcentdomain CONTAINS "host-data-coin-11.com" OR sourcentdomain CONTAINS "islamic-city.com/upload/" OR sourcentdomain CONTAINS "mordo.ru/upload/" OR sourcentdomain CONTAINS "nahbleiben.at/upload/" OR sourcentdomain CONTAINS "noblecreativeaz.com/upload/" OR sourcentdomain CONTAINS "one-wedding-film.com" OR sourcentdomain CONTAINS "piratia-life.ru/upload/" OR sourcentdomain CONTAINS "presstheme.me" OR sourcentdomain CONTAINS "real-enter-solutions.xyz" OR sourcentdomain CONTAINS "recmaster.ru/upload/" OR sourcentdomain CONTAINS "remik-franchise.ru/upload/" OR sourcentdomain CONTAINS "reoseio.com" OR sourcentdomain CONTAINS "signaturebusinesspark.com" OR sourcentdomain CONTAINS "sovels.ru/upload/" OR sourcentdomain CONTAINS "spaldingcompanies.com/upload/" OR sourcentdomain CONTAINS "toa.mygametoa.com" OR sourcentdomain CONTAINS "topexpertshop.com" OR sourcentdomain CONTAINS "topniemannpicksh0p.cc" OR sourcentdomain CONTAINS "tvqaq.cn/upload/" OR sourcentdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ads-memory.biz" OR sourcehostname CONTAINS "all-mobile-pa1ments.com.mx" OR sourcehostname CONTAINS "all-smart-green.com" OR sourcehostname CONTAINS "am1420wbec.com/upload/" OR sourcehostname CONTAINS "appwebstat.biz" OR sourcehostname CONTAINS "banhamm.com" OR sourcehostname CONTAINS "buy-fantasy-fo0tball.com.sg" OR sourcehostname CONTAINS "buy-fantasy-gmes.com.sg" OR sourcehostname CONTAINS "connectini.net" OR sourcehostname CONTAINS "dll1.stdcdn.com" OR sourcehostname CONTAINS "dollybuster.at/upload/" OR sourcehostname CONTAINS "egsagl.com/upload/" OR sourcehostname CONTAINS "enter-me.xyz" OR sourcehostname CONTAINS "fennsports.com/upload/" OR sourcehostname CONTAINS "file-coin-host-12.com" OR sourcehostname CONTAINS "ginta.link" OR sourcehostname CONTAINS "hhiuew33.com/check/safe" OR sourcehostname CONTAINS "host-data-coin-11.com" OR sourcehostname CONTAINS "islamic-city.com/upload/" OR sourcehostname CONTAINS "mordo.ru/upload/" OR sourcehostname CONTAINS "nahbleiben.at/upload/" OR sourcehostname CONTAINS "noblecreativeaz.com/upload/" OR sourcehostname CONTAINS "one-wedding-film.com" OR sourcehostname CONTAINS "piratia-life.ru/upload/" OR sourcehostname CONTAINS "presstheme.me" OR sourcehostname CONTAINS "real-enter-solutions.xyz" OR sourcehostname CONTAINS "recmaster.ru/upload/" OR sourcehostname CONTAINS "remik-franchise.ru/upload/" OR sourcehostname CONTAINS "reoseio.com" OR sourcehostname CONTAINS "signaturebusinesspark.com" OR sourcehostname CONTAINS "sovels.ru/upload/" OR sourcehostname CONTAINS "spaldingcompanies.com/upload/" OR sourcehostname CONTAINS "toa.mygametoa.com" OR sourcehostname CONTAINS "topexpertshop.com" OR sourcehostname CONTAINS "topniemannpicksh0p.cc" OR sourcehostname CONTAINS "tvqaq.cn/upload/" OR sourcehostname CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ads-memory.biz" OR destinationntdomain CONTAINS "all-mobile-pa1ments.com.mx" OR destinationntdomain CONTAINS "all-smart-green.com" OR destinationntdomain CONTAINS "am1420wbec.com/upload/" OR destinationntdomain CONTAINS "appwebstat.biz" OR destinationntdomain CONTAINS "banhamm.com" OR destinationntdomain CONTAINS "buy-fantasy-fo0tball.com.sg" OR destinationntdomain CONTAINS "buy-fantasy-gmes.com.sg" OR destinationntdomain CONTAINS "connectini.net" OR destinationntdomain CONTAINS "dll1.stdcdn.com" OR destinationntdomain CONTAINS "dollybuster.at/upload/" OR destinationntdomain CONTAINS "egsagl.com/upload/" OR destinationntdomain CONTAINS "enter-me.xyz" OR destinationntdomain CONTAINS "fennsports.com/upload/" OR destinationntdomain CONTAINS "file-coin-host-12.com" OR destinationntdomain CONTAINS "ginta.link" OR destinationntdomain CONTAINS "hhiuew33.com/check/safe" OR destinationntdomain CONTAINS "host-data-coin-11.com" OR destinationntdomain CONTAINS "islamic-city.com/upload/" OR destinationntdomain CONTAINS "mordo.ru/upload/" OR destinationntdomain CONTAINS "nahbleiben.at/upload/" OR destinationntdomain CONTAINS "noblecreativeaz.com/upload/" OR destinationntdomain CONTAINS "one-wedding-film.com" OR destinationntdomain CONTAINS "piratia-life.ru/upload/" OR destinationntdomain CONTAINS "presstheme.me" OR destinationntdomain CONTAINS "real-enter-solutions.xyz" OR destinationntdomain CONTAINS "recmaster.ru/upload/" OR destinationntdomain CONTAINS "remik-franchise.ru/upload/" OR destinationntdomain CONTAINS "reoseio.com" OR destinationntdomain CONTAINS "signaturebusinesspark.com" OR destinationntdomain CONTAINS "sovels.ru/upload/" OR destinationntdomain CONTAINS "spaldingcompanies.com/upload/" OR destinationntdomain CONTAINS "toa.mygametoa.com" OR destinationntdomain CONTAINS "topexpertshop.com" OR destinationntdomain CONTAINS "topniemannpicksh0p.cc" OR destinationntdomain CONTAINS "tvqaq.cn/upload/" OR destinationntdomain CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND (requesturl CONTAINS "ads-memory.biz" OR requesturl CONTAINS "all-mobile-pa1ments.com.mx" OR requesturl CONTAINS "all-smart-green.com" OR requesturl CONTAINS "am1420wbec.com/upload/" OR requesturl CONTAINS "appwebstat.biz" OR requesturl CONTAINS "banhamm.com" OR requesturl CONTAINS "buy-fantasy-fo0tball.com.sg" OR requesturl CONTAINS "buy-fantasy-gmes.com.sg" OR requesturl CONTAINS "connectini.net" OR requesturl CONTAINS "dll1.stdcdn.com" OR requesturl CONTAINS "dollybuster.at/upload/" OR requesturl CONTAINS "egsagl.com/upload/" OR requesturl CONTAINS "enter-me.xyz" OR requesturl CONTAINS "fennsports.com/upload/" OR requesturl CONTAINS "file-coin-host-12.com" OR requesturl CONTAINS "ginta.link" OR requesturl CONTAINS "hhiuew33.com/check/safe" OR requesturl CONTAINS "host-data-coin-11.com" OR requesturl CONTAINS "islamic-city.com/upload/" OR requesturl CONTAINS "mordo.ru/upload/" OR requesturl CONTAINS "nahbleiben.at/upload/" OR requesturl CONTAINS "noblecreativeaz.com/upload/" OR requesturl CONTAINS "one-wedding-film.com" OR requesturl CONTAINS "piratia-life.ru/upload/" OR requesturl CONTAINS "presstheme.me" OR requesturl CONTAINS "real-enter-solutions.xyz" OR requesturl CONTAINS "recmaster.ru/upload/" OR requesturl CONTAINS "remik-franchise.ru/upload/" OR requesturl CONTAINS "reoseio.com" OR requesturl CONTAINS "signaturebusinesspark.com" OR requesturl CONTAINS "sovels.ru/upload/" OR requesturl CONTAINS "spaldingcompanies.com/upload/" OR requesturl CONTAINS "toa.mygametoa.com" OR requesturl CONTAINS "topexpertshop.com" OR requesturl CONTAINS "topniemannpicksh0p.cc" OR requesturl CONTAINS "tvqaq.cn/upload/" OR requesturl CONTAINS "whsddzs.com/Home/Index/djksye")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Proxy" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Next Generation Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Flow" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Flow" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Server" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Server" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Email / Email Security" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Email / Email Security" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Application Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Application Security Broker" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Application Security Broker" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Source Code Repository" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Source Code Repository" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Authentication / VPN" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Authentication / VPN" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Content Management System" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Services / Applications" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Services / Applications" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Application Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Endpoint Management Systems" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Endpoint Management Systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Endpoint Management Systems" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Email / Email Security" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Email / Email Security" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Next Generation Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Proxy" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Flow" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Flow" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Server" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Server" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Application Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Endpoint management systems" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Endpoint management systems" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Application Audit" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Application Audit" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Unix / Linux / AIX" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Unix / Linux / AIX" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Application Security Broker" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Application Security Broker" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Source Code Repository" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Source Code Repository" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Email / Email Security" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="DNS / DHCP" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="DNS / DHCP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="DNS / DHCP" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Next Generation Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Proxy" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Flow" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Flow" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Server" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Server" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="DNS / DHCP" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="DNS / DHCP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="DNS / DHCP" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Email / Email Security" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Email / Email Security" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Web Application Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Endpoint management systems" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Endpoint management systems" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Content Management System" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Microsoft Windows" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Microsoft Windows" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Microsoft Windows" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Microsoft Windows" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Microsoft Windows" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Microsoft Windows" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Services / Applications" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Services / Applications" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Application Audit" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Application Audit" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Authentication / VPN" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Authentication / VPN" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Content Management System" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Unix / Linux / AIX" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Unix / Linux / AIX" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Network Access Control / NAC" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Network Access Control / NAC" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Network Access Control / NAC" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Network Access Control / NAC" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Virtualization / Containers" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Virtualization / Containers" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Virtualization / Containers" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Virtualization / Containers" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Access / Privileged User" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Access / Privileged User" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Access / Privileged User" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Access / Privileged User" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Access / Privileged User" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Access / Privileged User" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Access / Identity Management" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Access / Identity Management" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Access / Identity Management" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Access / Identity Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Access / Identity Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Access / Identity Management" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Identity Access Management" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Identity Access Management" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Identity Access Management" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Identity Access Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Identity Access Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Identity Access Management" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Authentication / WiFi" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Authentication / WiFi" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Application Security Broker" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Cloud Application Security Broker" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Source Code Repository" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Source Code Repository" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND ipaddress NOT NULL AND ipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND translatedipaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND deviceaddress NOT NULL AND deviceaddress IN ("178.62.113.205","185.163.204.22","185.163.45.70","185.186.142.166","185.215.113.10","185.38.142.132","212.193.30.21","212.193.30.45","5.9.224.217","92.255.57.115")
