index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("c150e4ab20d59affc62b916c2c90686f43040a9f","c0f7c2bb04aa09dae62f0e5feeb7c9c867685abc788ae6b0e6928ad7979dbcaf","e46bde83b8a3a7492fc79c22b337950fc49843a42020c41c615b24579c0c3251","f488861f8d3d013c3eef88983de8f5f37bb014ae13dc13007b26ebbd559e356e","3dba9ba8e265faefce024960b69c1f472ab7a898e7c224145740f1886d97119f","15e5bf0082fbb1036d39fc279293f0799f2ab5b2b0af47d9f3c3fdc4aa93de67","331d136101b286c2f7198fd41e5018fcadef720ca0e74b282c1a44310a792e7f","549a1ae688edfcb2e7a254ac3aded866b378b2e829f1bb8af42276b902f475e6","454e398869e189874c796133f68a837c9b7f2190b949a8222453884f84cf4a1b","e38d4140fce467bfd145a8f6299fc76b8851a62555b5c0f825b9a2200f85017c","5f0253f959d65c45a11b7436301ee5a851266614f811c753231d684eb5083782","e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c","16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0","5fff877789223fa9810a365dfdeafe982c92f346ecd20e003319c3067becd8ba")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("c150e4ab20d59affc62b916c2c90686f43040a9f","c0f7c2bb04aa09dae62f0e5feeb7c9c867685abc788ae6b0e6928ad7979dbcaf","e46bde83b8a3a7492fc79c22b337950fc49843a42020c41c615b24579c0c3251","f488861f8d3d013c3eef88983de8f5f37bb014ae13dc13007b26ebbd559e356e","3dba9ba8e265faefce024960b69c1f472ab7a898e7c224145740f1886d97119f","15e5bf0082fbb1036d39fc279293f0799f2ab5b2b0af47d9f3c3fdc4aa93de67","331d136101b286c2f7198fd41e5018fcadef720ca0e74b282c1a44310a792e7f","549a1ae688edfcb2e7a254ac3aded866b378b2e829f1bb8af42276b902f475e6","454e398869e189874c796133f68a837c9b7f2190b949a8222453884f84cf4a1b","e38d4140fce467bfd145a8f6299fc76b8851a62555b5c0f825b9a2200f85017c","5f0253f959d65c45a11b7436301ee5a851266614f811c753231d684eb5083782","e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c","16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0","5fff877789223fa9810a365dfdeafe982c92f346ecd20e003319c3067becd8ba")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("c150e4ab20d59affc62b916c2c90686f43040a9f","c0f7c2bb04aa09dae62f0e5feeb7c9c867685abc788ae6b0e6928ad7979dbcaf","e46bde83b8a3a7492fc79c22b337950fc49843a42020c41c615b24579c0c3251","f488861f8d3d013c3eef88983de8f5f37bb014ae13dc13007b26ebbd559e356e","3dba9ba8e265faefce024960b69c1f472ab7a898e7c224145740f1886d97119f","15e5bf0082fbb1036d39fc279293f0799f2ab5b2b0af47d9f3c3fdc4aa93de67","331d136101b286c2f7198fd41e5018fcadef720ca0e74b282c1a44310a792e7f","549a1ae688edfcb2e7a254ac3aded866b378b2e829f1bb8af42276b902f475e6","454e398869e189874c796133f68a837c9b7f2190b949a8222453884f84cf4a1b","e38d4140fce467bfd145a8f6299fc76b8851a62555b5c0f825b9a2200f85017c","5f0253f959d65c45a11b7436301ee5a851266614f811c753231d684eb5083782","e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c","16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0","5fff877789223fa9810a365dfdeafe982c92f346ecd20e003319c3067becd8ba")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("c150e4ab20d59affc62b916c2c90686f43040a9f","c0f7c2bb04aa09dae62f0e5feeb7c9c867685abc788ae6b0e6928ad7979dbcaf","e46bde83b8a3a7492fc79c22b337950fc49843a42020c41c615b24579c0c3251","f488861f8d3d013c3eef88983de8f5f37bb014ae13dc13007b26ebbd559e356e","3dba9ba8e265faefce024960b69c1f472ab7a898e7c224145740f1886d97119f","15e5bf0082fbb1036d39fc279293f0799f2ab5b2b0af47d9f3c3fdc4aa93de67","331d136101b286c2f7198fd41e5018fcadef720ca0e74b282c1a44310a792e7f","549a1ae688edfcb2e7a254ac3aded866b378b2e829f1bb8af42276b902f475e6","454e398869e189874c796133f68a837c9b7f2190b949a8222453884f84cf4a1b","e38d4140fce467bfd145a8f6299fc76b8851a62555b5c0f825b9a2200f85017c","5f0253f959d65c45a11b7436301ee5a851266614f811c753231d684eb5083782","e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c","16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0","5fff877789223fa9810a365dfdeafe982c92f346ecd20e003319c3067becd8ba")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("c150e4ab20d59affc62b916c2c90686f43040a9f","c0f7c2bb04aa09dae62f0e5feeb7c9c867685abc788ae6b0e6928ad7979dbcaf","e46bde83b8a3a7492fc79c22b337950fc49843a42020c41c615b24579c0c3251","f488861f8d3d013c3eef88983de8f5f37bb014ae13dc13007b26ebbd559e356e","3dba9ba8e265faefce024960b69c1f472ab7a898e7c224145740f1886d97119f","15e5bf0082fbb1036d39fc279293f0799f2ab5b2b0af47d9f3c3fdc4aa93de67","331d136101b286c2f7198fd41e5018fcadef720ca0e74b282c1a44310a792e7f","549a1ae688edfcb2e7a254ac3aded866b378b2e829f1bb8af42276b902f475e6","454e398869e189874c796133f68a837c9b7f2190b949a8222453884f84cf4a1b","e38d4140fce467bfd145a8f6299fc76b8851a62555b5c0f825b9a2200f85017c","5f0253f959d65c45a11b7436301ee5a851266614f811c753231d684eb5083782","e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c","16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0","5fff877789223fa9810a365dfdeafe982c92f346ecd20e003319c3067becd8ba")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("c150e4ab20d59affc62b916c2c90686f43040a9f","c0f7c2bb04aa09dae62f0e5feeb7c9c867685abc788ae6b0e6928ad7979dbcaf","e46bde83b8a3a7492fc79c22b337950fc49843a42020c41c615b24579c0c3251","f488861f8d3d013c3eef88983de8f5f37bb014ae13dc13007b26ebbd559e356e","3dba9ba8e265faefce024960b69c1f472ab7a898e7c224145740f1886d97119f","15e5bf0082fbb1036d39fc279293f0799f2ab5b2b0af47d9f3c3fdc4aa93de67","331d136101b286c2f7198fd41e5018fcadef720ca0e74b282c1a44310a792e7f","549a1ae688edfcb2e7a254ac3aded866b378b2e829f1bb8af42276b902f475e6","454e398869e189874c796133f68a837c9b7f2190b949a8222453884f84cf4a1b","e38d4140fce467bfd145a8f6299fc76b8851a62555b5c0f825b9a2200f85017c","5f0253f959d65c45a11b7436301ee5a851266614f811c753231d684eb5083782","e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c","16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0","5fff877789223fa9810a365dfdeafe982c92f346ecd20e003319c3067becd8ba")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("c150e4ab20d59affc62b916c2c90686f43040a9f","c0f7c2bb04aa09dae62f0e5feeb7c9c867685abc788ae6b0e6928ad7979dbcaf","e46bde83b8a3a7492fc79c22b337950fc49843a42020c41c615b24579c0c3251","f488861f8d3d013c3eef88983de8f5f37bb014ae13dc13007b26ebbd559e356e","3dba9ba8e265faefce024960b69c1f472ab7a898e7c224145740f1886d97119f","15e5bf0082fbb1036d39fc279293f0799f2ab5b2b0af47d9f3c3fdc4aa93de67","331d136101b286c2f7198fd41e5018fcadef720ca0e74b282c1a44310a792e7f","549a1ae688edfcb2e7a254ac3aded866b378b2e829f1bb8af42276b902f475e6","454e398869e189874c796133f68a837c9b7f2190b949a8222453884f84cf4a1b","e38d4140fce467bfd145a8f6299fc76b8851a62555b5c0f825b9a2200f85017c","5f0253f959d65c45a11b7436301ee5a851266614f811c753231d684eb5083782","e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c","16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0","5fff877789223fa9810a365dfdeafe982c92f346ecd20e003319c3067becd8ba")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("c150e4ab20d59affc62b916c2c90686f43040a9f","c0f7c2bb04aa09dae62f0e5feeb7c9c867685abc788ae6b0e6928ad7979dbcaf","e46bde83b8a3a7492fc79c22b337950fc49843a42020c41c615b24579c0c3251","f488861f8d3d013c3eef88983de8f5f37bb014ae13dc13007b26ebbd559e356e","3dba9ba8e265faefce024960b69c1f472ab7a898e7c224145740f1886d97119f","15e5bf0082fbb1036d39fc279293f0799f2ab5b2b0af47d9f3c3fdc4aa93de67","331d136101b286c2f7198fd41e5018fcadef720ca0e74b282c1a44310a792e7f","549a1ae688edfcb2e7a254ac3aded866b378b2e829f1bb8af42276b902f475e6","454e398869e189874c796133f68a837c9b7f2190b949a8222453884f84cf4a1b","e38d4140fce467bfd145a8f6299fc76b8851a62555b5c0f825b9a2200f85017c","5f0253f959d65c45a11b7436301ee5a851266614f811c753231d684eb5083782","e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c","16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0","5fff877789223fa9810a365dfdeafe982c92f346ecd20e003319c3067becd8ba")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("c150e4ab20d59affc62b916c2c90686f43040a9f","c0f7c2bb04aa09dae62f0e5feeb7c9c867685abc788ae6b0e6928ad7979dbcaf","e46bde83b8a3a7492fc79c22b337950fc49843a42020c41c615b24579c0c3251","f488861f8d3d013c3eef88983de8f5f37bb014ae13dc13007b26ebbd559e356e","3dba9ba8e265faefce024960b69c1f472ab7a898e7c224145740f1886d97119f","15e5bf0082fbb1036d39fc279293f0799f2ab5b2b0af47d9f3c3fdc4aa93de67","331d136101b286c2f7198fd41e5018fcadef720ca0e74b282c1a44310a792e7f","549a1ae688edfcb2e7a254ac3aded866b378b2e829f1bb8af42276b902f475e6","454e398869e189874c796133f68a837c9b7f2190b949a8222453884f84cf4a1b","e38d4140fce467bfd145a8f6299fc76b8851a62555b5c0f825b9a2200f85017c","5f0253f959d65c45a11b7436301ee5a851266614f811c753231d684eb5083782","e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c","16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0","5fff877789223fa9810a365dfdeafe982c92f346ecd20e003319c3067becd8ba")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("c150e4ab20d59affc62b916c2c90686f43040a9f","c0f7c2bb04aa09dae62f0e5feeb7c9c867685abc788ae6b0e6928ad7979dbcaf","e46bde83b8a3a7492fc79c22b337950fc49843a42020c41c615b24579c0c3251","f488861f8d3d013c3eef88983de8f5f37bb014ae13dc13007b26ebbd559e356e","3dba9ba8e265faefce024960b69c1f472ab7a898e7c224145740f1886d97119f","15e5bf0082fbb1036d39fc279293f0799f2ab5b2b0af47d9f3c3fdc4aa93de67","331d136101b286c2f7198fd41e5018fcadef720ca0e74b282c1a44310a792e7f","549a1ae688edfcb2e7a254ac3aded866b378b2e829f1bb8af42276b902f475e6","454e398869e189874c796133f68a837c9b7f2190b949a8222453884f84cf4a1b","e38d4140fce467bfd145a8f6299fc76b8851a62555b5c0f825b9a2200f85017c","5f0253f959d65c45a11b7436301ee5a851266614f811c753231d684eb5083782","e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c","16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0","5fff877789223fa9810a365dfdeafe982c92f346ecd20e003319c3067becd8ba")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("c150e4ab20d59affc62b916c2c90686f43040a9f","c0f7c2bb04aa09dae62f0e5feeb7c9c867685abc788ae6b0e6928ad7979dbcaf","e46bde83b8a3a7492fc79c22b337950fc49843a42020c41c615b24579c0c3251","f488861f8d3d013c3eef88983de8f5f37bb014ae13dc13007b26ebbd559e356e","3dba9ba8e265faefce024960b69c1f472ab7a898e7c224145740f1886d97119f","15e5bf0082fbb1036d39fc279293f0799f2ab5b2b0af47d9f3c3fdc4aa93de67","331d136101b286c2f7198fd41e5018fcadef720ca0e74b282c1a44310a792e7f","549a1ae688edfcb2e7a254ac3aded866b378b2e829f1bb8af42276b902f475e6","454e398869e189874c796133f68a837c9b7f2190b949a8222453884f84cf4a1b","e38d4140fce467bfd145a8f6299fc76b8851a62555b5c0f825b9a2200f85017c","5f0253f959d65c45a11b7436301ee5a851266614f811c753231d684eb5083782","e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c","16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0","5fff877789223fa9810a365dfdeafe982c92f346ecd20e003319c3067becd8ba")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("c150e4ab20d59affc62b916c2c90686f43040a9f","c0f7c2bb04aa09dae62f0e5feeb7c9c867685abc788ae6b0e6928ad7979dbcaf","e46bde83b8a3a7492fc79c22b337950fc49843a42020c41c615b24579c0c3251","f488861f8d3d013c3eef88983de8f5f37bb014ae13dc13007b26ebbd559e356e","3dba9ba8e265faefce024960b69c1f472ab7a898e7c224145740f1886d97119f","15e5bf0082fbb1036d39fc279293f0799f2ab5b2b0af47d9f3c3fdc4aa93de67","331d136101b286c2f7198fd41e5018fcadef720ca0e74b282c1a44310a792e7f","549a1ae688edfcb2e7a254ac3aded866b378b2e829f1bb8af42276b902f475e6","454e398869e189874c796133f68a837c9b7f2190b949a8222453884f84cf4a1b","e38d4140fce467bfd145a8f6299fc76b8851a62555b5c0f825b9a2200f85017c","5f0253f959d65c45a11b7436301ee5a851266614f811c753231d684eb5083782","e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c","16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0","5fff877789223fa9810a365dfdeafe982c92f346ecd20e003319c3067becd8ba")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("c150e4ab20d59affc62b916c2c90686f43040a9f","c0f7c2bb04aa09dae62f0e5feeb7c9c867685abc788ae6b0e6928ad7979dbcaf","e46bde83b8a3a7492fc79c22b337950fc49843a42020c41c615b24579c0c3251","f488861f8d3d013c3eef88983de8f5f37bb014ae13dc13007b26ebbd559e356e","3dba9ba8e265faefce024960b69c1f472ab7a898e7c224145740f1886d97119f","15e5bf0082fbb1036d39fc279293f0799f2ab5b2b0af47d9f3c3fdc4aa93de67","331d136101b286c2f7198fd41e5018fcadef720ca0e74b282c1a44310a792e7f","549a1ae688edfcb2e7a254ac3aded866b378b2e829f1bb8af42276b902f475e6","454e398869e189874c796133f68a837c9b7f2190b949a8222453884f84cf4a1b","e38d4140fce467bfd145a8f6299fc76b8851a62555b5c0f825b9a2200f85017c","5f0253f959d65c45a11b7436301ee5a851266614f811c753231d684eb5083782","e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c","16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0","5fff877789223fa9810a365dfdeafe982c92f346ecd20e003319c3067becd8ba")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("c150e4ab20d59affc62b916c2c90686f43040a9f","c0f7c2bb04aa09dae62f0e5feeb7c9c867685abc788ae6b0e6928ad7979dbcaf","e46bde83b8a3a7492fc79c22b337950fc49843a42020c41c615b24579c0c3251","f488861f8d3d013c3eef88983de8f5f37bb014ae13dc13007b26ebbd559e356e","3dba9ba8e265faefce024960b69c1f472ab7a898e7c224145740f1886d97119f","15e5bf0082fbb1036d39fc279293f0799f2ab5b2b0af47d9f3c3fdc4aa93de67","331d136101b286c2f7198fd41e5018fcadef720ca0e74b282c1a44310a792e7f","549a1ae688edfcb2e7a254ac3aded866b378b2e829f1bb8af42276b902f475e6","454e398869e189874c796133f68a837c9b7f2190b949a8222453884f84cf4a1b","e38d4140fce467bfd145a8f6299fc76b8851a62555b5c0f825b9a2200f85017c","5f0253f959d65c45a11b7436301ee5a851266614f811c753231d684eb5083782","e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c","16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0","5fff877789223fa9810a365dfdeafe982c92f346ecd20e003319c3067becd8ba")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("c150e4ab20d59affc62b916c2c90686f43040a9f","c0f7c2bb04aa09dae62f0e5feeb7c9c867685abc788ae6b0e6928ad7979dbcaf","e46bde83b8a3a7492fc79c22b337950fc49843a42020c41c615b24579c0c3251","f488861f8d3d013c3eef88983de8f5f37bb014ae13dc13007b26ebbd559e356e","3dba9ba8e265faefce024960b69c1f472ab7a898e7c224145740f1886d97119f","15e5bf0082fbb1036d39fc279293f0799f2ab5b2b0af47d9f3c3fdc4aa93de67","331d136101b286c2f7198fd41e5018fcadef720ca0e74b282c1a44310a792e7f","549a1ae688edfcb2e7a254ac3aded866b378b2e829f1bb8af42276b902f475e6","454e398869e189874c796133f68a837c9b7f2190b949a8222453884f84cf4a1b","e38d4140fce467bfd145a8f6299fc76b8851a62555b5c0f825b9a2200f85017c","5f0253f959d65c45a11b7436301ee5a851266614f811c753231d684eb5083782","e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c","16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0","5fff877789223fa9810a365dfdeafe982c92f346ecd20e003319c3067becd8ba")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("c150e4ab20d59affc62b916c2c90686f43040a9f","c0f7c2bb04aa09dae62f0e5feeb7c9c867685abc788ae6b0e6928ad7979dbcaf","e46bde83b8a3a7492fc79c22b337950fc49843a42020c41c615b24579c0c3251","f488861f8d3d013c3eef88983de8f5f37bb014ae13dc13007b26ebbd559e356e","3dba9ba8e265faefce024960b69c1f472ab7a898e7c224145740f1886d97119f","15e5bf0082fbb1036d39fc279293f0799f2ab5b2b0af47d9f3c3fdc4aa93de67","331d136101b286c2f7198fd41e5018fcadef720ca0e74b282c1a44310a792e7f","549a1ae688edfcb2e7a254ac3aded866b378b2e829f1bb8af42276b902f475e6","454e398869e189874c796133f68a837c9b7f2190b949a8222453884f84cf4a1b","e38d4140fce467bfd145a8f6299fc76b8851a62555b5c0f825b9a2200f85017c","5f0253f959d65c45a11b7436301ee5a851266614f811c753231d684eb5083782","e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c","16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0","5fff877789223fa9810a365dfdeafe982c92f346ecd20e003319c3067becd8ba")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("c150e4ab20d59affc62b916c2c90686f43040a9f","c0f7c2bb04aa09dae62f0e5feeb7c9c867685abc788ae6b0e6928ad7979dbcaf","e46bde83b8a3a7492fc79c22b337950fc49843a42020c41c615b24579c0c3251","f488861f8d3d013c3eef88983de8f5f37bb014ae13dc13007b26ebbd559e356e","3dba9ba8e265faefce024960b69c1f472ab7a898e7c224145740f1886d97119f","15e5bf0082fbb1036d39fc279293f0799f2ab5b2b0af47d9f3c3fdc4aa93de67","331d136101b286c2f7198fd41e5018fcadef720ca0e74b282c1a44310a792e7f","549a1ae688edfcb2e7a254ac3aded866b378b2e829f1bb8af42276b902f475e6","454e398869e189874c796133f68a837c9b7f2190b949a8222453884f84cf4a1b","e38d4140fce467bfd145a8f6299fc76b8851a62555b5c0f825b9a2200f85017c","5f0253f959d65c45a11b7436301ee5a851266614f811c753231d684eb5083782","e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c","16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0","5fff877789223fa9810a365dfdeafe982c92f346ecd20e003319c3067becd8ba")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("c150e4ab20d59affc62b916c2c90686f43040a9f","c0f7c2bb04aa09dae62f0e5feeb7c9c867685abc788ae6b0e6928ad7979dbcaf","e46bde83b8a3a7492fc79c22b337950fc49843a42020c41c615b24579c0c3251","f488861f8d3d013c3eef88983de8f5f37bb014ae13dc13007b26ebbd559e356e","3dba9ba8e265faefce024960b69c1f472ab7a898e7c224145740f1886d97119f","15e5bf0082fbb1036d39fc279293f0799f2ab5b2b0af47d9f3c3fdc4aa93de67","331d136101b286c2f7198fd41e5018fcadef720ca0e74b282c1a44310a792e7f","549a1ae688edfcb2e7a254ac3aded866b378b2e829f1bb8af42276b902f475e6","454e398869e189874c796133f68a837c9b7f2190b949a8222453884f84cf4a1b","e38d4140fce467bfd145a8f6299fc76b8851a62555b5c0f825b9a2200f85017c","5f0253f959d65c45a11b7436301ee5a851266614f811c753231d684eb5083782","e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c","16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0","5fff877789223fa9810a365dfdeafe982c92f346ecd20e003319c3067becd8ba")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("c150e4ab20d59affc62b916c2c90686f43040a9f","c0f7c2bb04aa09dae62f0e5feeb7c9c867685abc788ae6b0e6928ad7979dbcaf","e46bde83b8a3a7492fc79c22b337950fc49843a42020c41c615b24579c0c3251","f488861f8d3d013c3eef88983de8f5f37bb014ae13dc13007b26ebbd559e356e","3dba9ba8e265faefce024960b69c1f472ab7a898e7c224145740f1886d97119f","15e5bf0082fbb1036d39fc279293f0799f2ab5b2b0af47d9f3c3fdc4aa93de67","331d136101b286c2f7198fd41e5018fcadef720ca0e74b282c1a44310a792e7f","549a1ae688edfcb2e7a254ac3aded866b378b2e829f1bb8af42276b902f475e6","454e398869e189874c796133f68a837c9b7f2190b949a8222453884f84cf4a1b","e38d4140fce467bfd145a8f6299fc76b8851a62555b5c0f825b9a2200f85017c","5f0253f959d65c45a11b7436301ee5a851266614f811c753231d684eb5083782","e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c","16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0","5fff877789223fa9810a365dfdeafe982c92f346ecd20e003319c3067becd8ba")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("c150e4ab20d59affc62b916c2c90686f43040a9f","c0f7c2bb04aa09dae62f0e5feeb7c9c867685abc788ae6b0e6928ad7979dbcaf","e46bde83b8a3a7492fc79c22b337950fc49843a42020c41c615b24579c0c3251","f488861f8d3d013c3eef88983de8f5f37bb014ae13dc13007b26ebbd559e356e","3dba9ba8e265faefce024960b69c1f472ab7a898e7c224145740f1886d97119f","15e5bf0082fbb1036d39fc279293f0799f2ab5b2b0af47d9f3c3fdc4aa93de67","331d136101b286c2f7198fd41e5018fcadef720ca0e74b282c1a44310a792e7f","549a1ae688edfcb2e7a254ac3aded866b378b2e829f1bb8af42276b902f475e6","454e398869e189874c796133f68a837c9b7f2190b949a8222453884f84cf4a1b","e38d4140fce467bfd145a8f6299fc76b8851a62555b5c0f825b9a2200f85017c","5f0253f959d65c45a11b7436301ee5a851266614f811c753231d684eb5083782","e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c","16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0","5fff877789223fa9810a365dfdeafe982c92f346ecd20e003319c3067becd8ba")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("c150e4ab20d59affc62b916c2c90686f43040a9f","c0f7c2bb04aa09dae62f0e5feeb7c9c867685abc788ae6b0e6928ad7979dbcaf","e46bde83b8a3a7492fc79c22b337950fc49843a42020c41c615b24579c0c3251","f488861f8d3d013c3eef88983de8f5f37bb014ae13dc13007b26ebbd559e356e","3dba9ba8e265faefce024960b69c1f472ab7a898e7c224145740f1886d97119f","15e5bf0082fbb1036d39fc279293f0799f2ab5b2b0af47d9f3c3fdc4aa93de67","331d136101b286c2f7198fd41e5018fcadef720ca0e74b282c1a44310a792e7f","549a1ae688edfcb2e7a254ac3aded866b378b2e829f1bb8af42276b902f475e6","454e398869e189874c796133f68a837c9b7f2190b949a8222453884f84cf4a1b","e38d4140fce467bfd145a8f6299fc76b8851a62555b5c0f825b9a2200f85017c","5f0253f959d65c45a11b7436301ee5a851266614f811c753231d684eb5083782","e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c","16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0","5fff877789223fa9810a365dfdeafe982c92f346ecd20e003319c3067becd8ba")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("c150e4ab20d59affc62b916c2c90686f43040a9f","c0f7c2bb04aa09dae62f0e5feeb7c9c867685abc788ae6b0e6928ad7979dbcaf","e46bde83b8a3a7492fc79c22b337950fc49843a42020c41c615b24579c0c3251","f488861f8d3d013c3eef88983de8f5f37bb014ae13dc13007b26ebbd559e356e","3dba9ba8e265faefce024960b69c1f472ab7a898e7c224145740f1886d97119f","15e5bf0082fbb1036d39fc279293f0799f2ab5b2b0af47d9f3c3fdc4aa93de67","331d136101b286c2f7198fd41e5018fcadef720ca0e74b282c1a44310a792e7f","549a1ae688edfcb2e7a254ac3aded866b378b2e829f1bb8af42276b902f475e6","454e398869e189874c796133f68a837c9b7f2190b949a8222453884f84cf4a1b","e38d4140fce467bfd145a8f6299fc76b8851a62555b5c0f825b9a2200f85017c","5f0253f959d65c45a11b7436301ee5a851266614f811c753231d684eb5083782","e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c","16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0","5fff877789223fa9810a365dfdeafe982c92f346ecd20e003319c3067becd8ba")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("c150e4ab20d59affc62b916c2c90686f43040a9f","c0f7c2bb04aa09dae62f0e5feeb7c9c867685abc788ae6b0e6928ad7979dbcaf","e46bde83b8a3a7492fc79c22b337950fc49843a42020c41c615b24579c0c3251","f488861f8d3d013c3eef88983de8f5f37bb014ae13dc13007b26ebbd559e356e","3dba9ba8e265faefce024960b69c1f472ab7a898e7c224145740f1886d97119f","15e5bf0082fbb1036d39fc279293f0799f2ab5b2b0af47d9f3c3fdc4aa93de67","331d136101b286c2f7198fd41e5018fcadef720ca0e74b282c1a44310a792e7f","549a1ae688edfcb2e7a254ac3aded866b378b2e829f1bb8af42276b902f475e6","454e398869e189874c796133f68a837c9b7f2190b949a8222453884f84cf4a1b","e38d4140fce467bfd145a8f6299fc76b8851a62555b5c0f825b9a2200f85017c","5f0253f959d65c45a11b7436301ee5a851266614f811c753231d684eb5083782","e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c","16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0","5fff877789223fa9810a365dfdeafe982c92f346ecd20e003319c3067becd8ba")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("c150e4ab20d59affc62b916c2c90686f43040a9f","c0f7c2bb04aa09dae62f0e5feeb7c9c867685abc788ae6b0e6928ad7979dbcaf","e46bde83b8a3a7492fc79c22b337950fc49843a42020c41c615b24579c0c3251","f488861f8d3d013c3eef88983de8f5f37bb014ae13dc13007b26ebbd559e356e","3dba9ba8e265faefce024960b69c1f472ab7a898e7c224145740f1886d97119f","15e5bf0082fbb1036d39fc279293f0799f2ab5b2b0af47d9f3c3fdc4aa93de67","331d136101b286c2f7198fd41e5018fcadef720ca0e74b282c1a44310a792e7f","549a1ae688edfcb2e7a254ac3aded866b378b2e829f1bb8af42276b902f475e6","454e398869e189874c796133f68a837c9b7f2190b949a8222453884f84cf4a1b","e38d4140fce467bfd145a8f6299fc76b8851a62555b5c0f825b9a2200f85017c","5f0253f959d65c45a11b7436301ee5a851266614f811c753231d684eb5083782","e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c","16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0","5fff877789223fa9810a365dfdeafe982c92f346ecd20e003319c3067becd8ba")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("c150e4ab20d59affc62b916c2c90686f43040a9f","c0f7c2bb04aa09dae62f0e5feeb7c9c867685abc788ae6b0e6928ad7979dbcaf","e46bde83b8a3a7492fc79c22b337950fc49843a42020c41c615b24579c0c3251","f488861f8d3d013c3eef88983de8f5f37bb014ae13dc13007b26ebbd559e356e","3dba9ba8e265faefce024960b69c1f472ab7a898e7c224145740f1886d97119f","15e5bf0082fbb1036d39fc279293f0799f2ab5b2b0af47d9f3c3fdc4aa93de67","331d136101b286c2f7198fd41e5018fcadef720ca0e74b282c1a44310a792e7f","549a1ae688edfcb2e7a254ac3aded866b378b2e829f1bb8af42276b902f475e6","454e398869e189874c796133f68a837c9b7f2190b949a8222453884f84cf4a1b","e38d4140fce467bfd145a8f6299fc76b8851a62555b5c0f825b9a2200f85017c","5f0253f959d65c45a11b7436301ee5a851266614f811c753231d684eb5083782","e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c","16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0","5fff877789223fa9810a365dfdeafe982c92f346ecd20e003319c3067becd8ba")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("c150e4ab20d59affc62b916c2c90686f43040a9f","c0f7c2bb04aa09dae62f0e5feeb7c9c867685abc788ae6b0e6928ad7979dbcaf","e46bde83b8a3a7492fc79c22b337950fc49843a42020c41c615b24579c0c3251","f488861f8d3d013c3eef88983de8f5f37bb014ae13dc13007b26ebbd559e356e","3dba9ba8e265faefce024960b69c1f472ab7a898e7c224145740f1886d97119f","15e5bf0082fbb1036d39fc279293f0799f2ab5b2b0af47d9f3c3fdc4aa93de67","331d136101b286c2f7198fd41e5018fcadef720ca0e74b282c1a44310a792e7f","549a1ae688edfcb2e7a254ac3aded866b378b2e829f1bb8af42276b902f475e6","454e398869e189874c796133f68a837c9b7f2190b949a8222453884f84cf4a1b","e38d4140fce467bfd145a8f6299fc76b8851a62555b5c0f825b9a2200f85017c","5f0253f959d65c45a11b7436301ee5a851266614f811c753231d684eb5083782","e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c","16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0","5fff877789223fa9810a365dfdeafe982c92f346ecd20e003319c3067becd8ba")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("c150e4ab20d59affc62b916c2c90686f43040a9f","c0f7c2bb04aa09dae62f0e5feeb7c9c867685abc788ae6b0e6928ad7979dbcaf","e46bde83b8a3a7492fc79c22b337950fc49843a42020c41c615b24579c0c3251","f488861f8d3d013c3eef88983de8f5f37bb014ae13dc13007b26ebbd559e356e","3dba9ba8e265faefce024960b69c1f472ab7a898e7c224145740f1886d97119f","15e5bf0082fbb1036d39fc279293f0799f2ab5b2b0af47d9f3c3fdc4aa93de67","331d136101b286c2f7198fd41e5018fcadef720ca0e74b282c1a44310a792e7f","549a1ae688edfcb2e7a254ac3aded866b378b2e829f1bb8af42276b902f475e6","454e398869e189874c796133f68a837c9b7f2190b949a8222453884f84cf4a1b","e38d4140fce467bfd145a8f6299fc76b8851a62555b5c0f825b9a2200f85017c","5f0253f959d65c45a11b7436301ee5a851266614f811c753231d684eb5083782","e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c","16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0","5fff877789223fa9810a365dfdeafe982c92f346ecd20e003319c3067becd8ba")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("c150e4ab20d59affc62b916c2c90686f43040a9f","c0f7c2bb04aa09dae62f0e5feeb7c9c867685abc788ae6b0e6928ad7979dbcaf","e46bde83b8a3a7492fc79c22b337950fc49843a42020c41c615b24579c0c3251","f488861f8d3d013c3eef88983de8f5f37bb014ae13dc13007b26ebbd559e356e","3dba9ba8e265faefce024960b69c1f472ab7a898e7c224145740f1886d97119f","15e5bf0082fbb1036d39fc279293f0799f2ab5b2b0af47d9f3c3fdc4aa93de67","331d136101b286c2f7198fd41e5018fcadef720ca0e74b282c1a44310a792e7f","549a1ae688edfcb2e7a254ac3aded866b378b2e829f1bb8af42276b902f475e6","454e398869e189874c796133f68a837c9b7f2190b949a8222453884f84cf4a1b","e38d4140fce467bfd145a8f6299fc76b8851a62555b5c0f825b9a2200f85017c","5f0253f959d65c45a11b7436301ee5a851266614f811c753231d684eb5083782","e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c","16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0","5fff877789223fa9810a365dfdeafe982c92f346ecd20e003319c3067becd8ba")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("c150e4ab20d59affc62b916c2c90686f43040a9f","c0f7c2bb04aa09dae62f0e5feeb7c9c867685abc788ae6b0e6928ad7979dbcaf","e46bde83b8a3a7492fc79c22b337950fc49843a42020c41c615b24579c0c3251","f488861f8d3d013c3eef88983de8f5f37bb014ae13dc13007b26ebbd559e356e","3dba9ba8e265faefce024960b69c1f472ab7a898e7c224145740f1886d97119f","15e5bf0082fbb1036d39fc279293f0799f2ab5b2b0af47d9f3c3fdc4aa93de67","331d136101b286c2f7198fd41e5018fcadef720ca0e74b282c1a44310a792e7f","549a1ae688edfcb2e7a254ac3aded866b378b2e829f1bb8af42276b902f475e6","454e398869e189874c796133f68a837c9b7f2190b949a8222453884f84cf4a1b","e38d4140fce467bfd145a8f6299fc76b8851a62555b5c0f825b9a2200f85017c","5f0253f959d65c45a11b7436301ee5a851266614f811c753231d684eb5083782","e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c","16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0","5fff877789223fa9810a365dfdeafe982c92f346ecd20e003319c3067becd8ba")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("c150e4ab20d59affc62b916c2c90686f43040a9f","c0f7c2bb04aa09dae62f0e5feeb7c9c867685abc788ae6b0e6928ad7979dbcaf","e46bde83b8a3a7492fc79c22b337950fc49843a42020c41c615b24579c0c3251","f488861f8d3d013c3eef88983de8f5f37bb014ae13dc13007b26ebbd559e356e","3dba9ba8e265faefce024960b69c1f472ab7a898e7c224145740f1886d97119f","15e5bf0082fbb1036d39fc279293f0799f2ab5b2b0af47d9f3c3fdc4aa93de67","331d136101b286c2f7198fd41e5018fcadef720ca0e74b282c1a44310a792e7f","549a1ae688edfcb2e7a254ac3aded866b378b2e829f1bb8af42276b902f475e6","454e398869e189874c796133f68a837c9b7f2190b949a8222453884f84cf4a1b","e38d4140fce467bfd145a8f6299fc76b8851a62555b5c0f825b9a2200f85017c","5f0253f959d65c45a11b7436301ee5a851266614f811c753231d684eb5083782","e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c","16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0","5fff877789223fa9810a365dfdeafe982c92f346ecd20e003319c3067becd8ba")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("c150e4ab20d59affc62b916c2c90686f43040a9f","c0f7c2bb04aa09dae62f0e5feeb7c9c867685abc788ae6b0e6928ad7979dbcaf","e46bde83b8a3a7492fc79c22b337950fc49843a42020c41c615b24579c0c3251","f488861f8d3d013c3eef88983de8f5f37bb014ae13dc13007b26ebbd559e356e","3dba9ba8e265faefce024960b69c1f472ab7a898e7c224145740f1886d97119f","15e5bf0082fbb1036d39fc279293f0799f2ab5b2b0af47d9f3c3fdc4aa93de67","331d136101b286c2f7198fd41e5018fcadef720ca0e74b282c1a44310a792e7f","549a1ae688edfcb2e7a254ac3aded866b378b2e829f1bb8af42276b902f475e6","454e398869e189874c796133f68a837c9b7f2190b949a8222453884f84cf4a1b","e38d4140fce467bfd145a8f6299fc76b8851a62555b5c0f825b9a2200f85017c","5f0253f959d65c45a11b7436301ee5a851266614f811c753231d684eb5083782","e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c","16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0","5fff877789223fa9810a365dfdeafe982c92f346ecd20e003319c3067becd8ba")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("c150e4ab20d59affc62b916c2c90686f43040a9f","c0f7c2bb04aa09dae62f0e5feeb7c9c867685abc788ae6b0e6928ad7979dbcaf","e46bde83b8a3a7492fc79c22b337950fc49843a42020c41c615b24579c0c3251","f488861f8d3d013c3eef88983de8f5f37bb014ae13dc13007b26ebbd559e356e","3dba9ba8e265faefce024960b69c1f472ab7a898e7c224145740f1886d97119f","15e5bf0082fbb1036d39fc279293f0799f2ab5b2b0af47d9f3c3fdc4aa93de67","331d136101b286c2f7198fd41e5018fcadef720ca0e74b282c1a44310a792e7f","549a1ae688edfcb2e7a254ac3aded866b378b2e829f1bb8af42276b902f475e6","454e398869e189874c796133f68a837c9b7f2190b949a8222453884f84cf4a1b","e38d4140fce467bfd145a8f6299fc76b8851a62555b5c0f825b9a2200f85017c","5f0253f959d65c45a11b7436301ee5a851266614f811c753231d684eb5083782","e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c","16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0","5fff877789223fa9810a365dfdeafe982c92f346ecd20e003319c3067becd8ba")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("c150e4ab20d59affc62b916c2c90686f43040a9f","c0f7c2bb04aa09dae62f0e5feeb7c9c867685abc788ae6b0e6928ad7979dbcaf","e46bde83b8a3a7492fc79c22b337950fc49843a42020c41c615b24579c0c3251","f488861f8d3d013c3eef88983de8f5f37bb014ae13dc13007b26ebbd559e356e","3dba9ba8e265faefce024960b69c1f472ab7a898e7c224145740f1886d97119f","15e5bf0082fbb1036d39fc279293f0799f2ab5b2b0af47d9f3c3fdc4aa93de67","331d136101b286c2f7198fd41e5018fcadef720ca0e74b282c1a44310a792e7f","549a1ae688edfcb2e7a254ac3aded866b378b2e829f1bb8af42276b902f475e6","454e398869e189874c796133f68a837c9b7f2190b949a8222453884f84cf4a1b","e38d4140fce467bfd145a8f6299fc76b8851a62555b5c0f825b9a2200f85017c","5f0253f959d65c45a11b7436301ee5a851266614f811c753231d684eb5083782","e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c","16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0","5fff877789223fa9810a365dfdeafe982c92f346ecd20e003319c3067becd8ba")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("c150e4ab20d59affc62b916c2c90686f43040a9f","c0f7c2bb04aa09dae62f0e5feeb7c9c867685abc788ae6b0e6928ad7979dbcaf","e46bde83b8a3a7492fc79c22b337950fc49843a42020c41c615b24579c0c3251","f488861f8d3d013c3eef88983de8f5f37bb014ae13dc13007b26ebbd559e356e","3dba9ba8e265faefce024960b69c1f472ab7a898e7c224145740f1886d97119f","15e5bf0082fbb1036d39fc279293f0799f2ab5b2b0af47d9f3c3fdc4aa93de67","331d136101b286c2f7198fd41e5018fcadef720ca0e74b282c1a44310a792e7f","549a1ae688edfcb2e7a254ac3aded866b378b2e829f1bb8af42276b902f475e6","454e398869e189874c796133f68a837c9b7f2190b949a8222453884f84cf4a1b","e38d4140fce467bfd145a8f6299fc76b8851a62555b5c0f825b9a2200f85017c","5f0253f959d65c45a11b7436301ee5a851266614f811c753231d684eb5083782","e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c","16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0","5fff877789223fa9810a365dfdeafe982c92f346ecd20e003319c3067becd8ba")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("c150e4ab20d59affc62b916c2c90686f43040a9f","c0f7c2bb04aa09dae62f0e5feeb7c9c867685abc788ae6b0e6928ad7979dbcaf","e46bde83b8a3a7492fc79c22b337950fc49843a42020c41c615b24579c0c3251","f488861f8d3d013c3eef88983de8f5f37bb014ae13dc13007b26ebbd559e356e","3dba9ba8e265faefce024960b69c1f472ab7a898e7c224145740f1886d97119f","15e5bf0082fbb1036d39fc279293f0799f2ab5b2b0af47d9f3c3fdc4aa93de67","331d136101b286c2f7198fd41e5018fcadef720ca0e74b282c1a44310a792e7f","549a1ae688edfcb2e7a254ac3aded866b378b2e829f1bb8af42276b902f475e6","454e398869e189874c796133f68a837c9b7f2190b949a8222453884f84cf4a1b","e38d4140fce467bfd145a8f6299fc76b8851a62555b5c0f825b9a2200f85017c","5f0253f959d65c45a11b7436301ee5a851266614f811c753231d684eb5083782","e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c","16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0","5fff877789223fa9810a365dfdeafe982c92f346ecd20e003319c3067becd8ba")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("c150e4ab20d59affc62b916c2c90686f43040a9f","c0f7c2bb04aa09dae62f0e5feeb7c9c867685abc788ae6b0e6928ad7979dbcaf","e46bde83b8a3a7492fc79c22b337950fc49843a42020c41c615b24579c0c3251","f488861f8d3d013c3eef88983de8f5f37bb014ae13dc13007b26ebbd559e356e","3dba9ba8e265faefce024960b69c1f472ab7a898e7c224145740f1886d97119f","15e5bf0082fbb1036d39fc279293f0799f2ab5b2b0af47d9f3c3fdc4aa93de67","331d136101b286c2f7198fd41e5018fcadef720ca0e74b282c1a44310a792e7f","549a1ae688edfcb2e7a254ac3aded866b378b2e829f1bb8af42276b902f475e6","454e398869e189874c796133f68a837c9b7f2190b949a8222453884f84cf4a1b","e38d4140fce467bfd145a8f6299fc76b8851a62555b5c0f825b9a2200f85017c","5f0253f959d65c45a11b7436301ee5a851266614f811c753231d684eb5083782","e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c","16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0","5fff877789223fa9810a365dfdeafe982c92f346ecd20e003319c3067becd8ba")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="O365 General" AND requesturl NOT NULL AND requesturl IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="O365 General" AND Message NOT NULL AND Message IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="O365 General" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("http://185.141.216.127/tr.e","https://pub-2149a070e76f4ccabd67228f754768dc.r2.dev/i-google-captcha-continue-latest-27-l-1.html","https://pub-959ff112c2eb41ce8f7b24e38c9b4f94.r2.dev/google-captcha-continue-latest-j-kl-3.html","https://chatgptitalia.net/","http://45.221.64.245/mot/","http://104.164.55.7/231/means.d")
