index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8","902b27a5fd2e5f17e5340e350afa037549ce9faa","02c37ccdfccfe03560a4bf069f46e8ae3a5d2348","b627963a9bac33fa6e3de0f9469b2fa5ecdef6ae","36bba4d26ecf02623a51c6241133c4290551e27f","d117643019d665a29ce8a7b812268fb8d3e5aadb","6239b4d374539c940cffa698e0993d199918a2fc","7c1b25518dee1e30b5a6eaa1ea8e4a3780c24d0c","a4aff23b9a58b598524a71f09aa67994083a9c83","c30af6fa5df14e1ba9355b60a9214937f6f18990","ca16a95cd38707bad2dc524bb3086b3c0cb3e372")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8","902b27a5fd2e5f17e5340e350afa037549ce9faa","02c37ccdfccfe03560a4bf069f46e8ae3a5d2348","b627963a9bac33fa6e3de0f9469b2fa5ecdef6ae","36bba4d26ecf02623a51c6241133c4290551e27f","d117643019d665a29ce8a7b812268fb8d3e5aadb","6239b4d374539c940cffa698e0993d199918a2fc","7c1b25518dee1e30b5a6eaa1ea8e4a3780c24d0c","a4aff23b9a58b598524a71f09aa67994083a9c83","c30af6fa5df14e1ba9355b60a9214937f6f18990","ca16a95cd38707bad2dc524bb3086b3c0cb3e372")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8","902b27a5fd2e5f17e5340e350afa037549ce9faa","02c37ccdfccfe03560a4bf069f46e8ae3a5d2348","b627963a9bac33fa6e3de0f9469b2fa5ecdef6ae","36bba4d26ecf02623a51c6241133c4290551e27f","d117643019d665a29ce8a7b812268fb8d3e5aadb","6239b4d374539c940cffa698e0993d199918a2fc","7c1b25518dee1e30b5a6eaa1ea8e4a3780c24d0c","a4aff23b9a58b598524a71f09aa67994083a9c83","c30af6fa5df14e1ba9355b60a9214937f6f18990","ca16a95cd38707bad2dc524bb3086b3c0cb3e372")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8","902b27a5fd2e5f17e5340e350afa037549ce9faa","02c37ccdfccfe03560a4bf069f46e8ae3a5d2348","b627963a9bac33fa6e3de0f9469b2fa5ecdef6ae","36bba4d26ecf02623a51c6241133c4290551e27f","d117643019d665a29ce8a7b812268fb8d3e5aadb","6239b4d374539c940cffa698e0993d199918a2fc","7c1b25518dee1e30b5a6eaa1ea8e4a3780c24d0c","a4aff23b9a58b598524a71f09aa67994083a9c83","c30af6fa5df14e1ba9355b60a9214937f6f18990","ca16a95cd38707bad2dc524bb3086b3c0cb3e372")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8","902b27a5fd2e5f17e5340e350afa037549ce9faa","02c37ccdfccfe03560a4bf069f46e8ae3a5d2348","b627963a9bac33fa6e3de0f9469b2fa5ecdef6ae","36bba4d26ecf02623a51c6241133c4290551e27f","d117643019d665a29ce8a7b812268fb8d3e5aadb","6239b4d374539c940cffa698e0993d199918a2fc","7c1b25518dee1e30b5a6eaa1ea8e4a3780c24d0c","a4aff23b9a58b598524a71f09aa67994083a9c83","c30af6fa5df14e1ba9355b60a9214937f6f18990","ca16a95cd38707bad2dc524bb3086b3c0cb3e372")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8","902b27a5fd2e5f17e5340e350afa037549ce9faa","02c37ccdfccfe03560a4bf069f46e8ae3a5d2348","b627963a9bac33fa6e3de0f9469b2fa5ecdef6ae","36bba4d26ecf02623a51c6241133c4290551e27f","d117643019d665a29ce8a7b812268fb8d3e5aadb","6239b4d374539c940cffa698e0993d199918a2fc","7c1b25518dee1e30b5a6eaa1ea8e4a3780c24d0c","a4aff23b9a58b598524a71f09aa67994083a9c83","c30af6fa5df14e1ba9355b60a9214937f6f18990","ca16a95cd38707bad2dc524bb3086b3c0cb3e372")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8","902b27a5fd2e5f17e5340e350afa037549ce9faa","02c37ccdfccfe03560a4bf069f46e8ae3a5d2348","b627963a9bac33fa6e3de0f9469b2fa5ecdef6ae","36bba4d26ecf02623a51c6241133c4290551e27f","d117643019d665a29ce8a7b812268fb8d3e5aadb","6239b4d374539c940cffa698e0993d199918a2fc","7c1b25518dee1e30b5a6eaa1ea8e4a3780c24d0c","a4aff23b9a58b598524a71f09aa67994083a9c83","c30af6fa5df14e1ba9355b60a9214937f6f18990","ca16a95cd38707bad2dc524bb3086b3c0cb3e372")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8","902b27a5fd2e5f17e5340e350afa037549ce9faa","02c37ccdfccfe03560a4bf069f46e8ae3a5d2348","b627963a9bac33fa6e3de0f9469b2fa5ecdef6ae","36bba4d26ecf02623a51c6241133c4290551e27f","d117643019d665a29ce8a7b812268fb8d3e5aadb","6239b4d374539c940cffa698e0993d199918a2fc","7c1b25518dee1e30b5a6eaa1ea8e4a3780c24d0c","a4aff23b9a58b598524a71f09aa67994083a9c83","c30af6fa5df14e1ba9355b60a9214937f6f18990","ca16a95cd38707bad2dc524bb3086b3c0cb3e372")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8","902b27a5fd2e5f17e5340e350afa037549ce9faa","02c37ccdfccfe03560a4bf069f46e8ae3a5d2348","b627963a9bac33fa6e3de0f9469b2fa5ecdef6ae","36bba4d26ecf02623a51c6241133c4290551e27f","d117643019d665a29ce8a7b812268fb8d3e5aadb","6239b4d374539c940cffa698e0993d199918a2fc","7c1b25518dee1e30b5a6eaa1ea8e4a3780c24d0c","a4aff23b9a58b598524a71f09aa67994083a9c83","c30af6fa5df14e1ba9355b60a9214937f6f18990","ca16a95cd38707bad2dc524bb3086b3c0cb3e372")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8","902b27a5fd2e5f17e5340e350afa037549ce9faa","02c37ccdfccfe03560a4bf069f46e8ae3a5d2348","b627963a9bac33fa6e3de0f9469b2fa5ecdef6ae","36bba4d26ecf02623a51c6241133c4290551e27f","d117643019d665a29ce8a7b812268fb8d3e5aadb","6239b4d374539c940cffa698e0993d199918a2fc","7c1b25518dee1e30b5a6eaa1ea8e4a3780c24d0c","a4aff23b9a58b598524a71f09aa67994083a9c83","c30af6fa5df14e1ba9355b60a9214937f6f18990","ca16a95cd38707bad2dc524bb3086b3c0cb3e372")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8","902b27a5fd2e5f17e5340e350afa037549ce9faa","02c37ccdfccfe03560a4bf069f46e8ae3a5d2348","b627963a9bac33fa6e3de0f9469b2fa5ecdef6ae","36bba4d26ecf02623a51c6241133c4290551e27f","d117643019d665a29ce8a7b812268fb8d3e5aadb","6239b4d374539c940cffa698e0993d199918a2fc","7c1b25518dee1e30b5a6eaa1ea8e4a3780c24d0c","a4aff23b9a58b598524a71f09aa67994083a9c83","c30af6fa5df14e1ba9355b60a9214937f6f18990","ca16a95cd38707bad2dc524bb3086b3c0cb3e372")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8","902b27a5fd2e5f17e5340e350afa037549ce9faa","02c37ccdfccfe03560a4bf069f46e8ae3a5d2348","b627963a9bac33fa6e3de0f9469b2fa5ecdef6ae","36bba4d26ecf02623a51c6241133c4290551e27f","d117643019d665a29ce8a7b812268fb8d3e5aadb","6239b4d374539c940cffa698e0993d199918a2fc","7c1b25518dee1e30b5a6eaa1ea8e4a3780c24d0c","a4aff23b9a58b598524a71f09aa67994083a9c83","c30af6fa5df14e1ba9355b60a9214937f6f18990","ca16a95cd38707bad2dc524bb3086b3c0cb3e372")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8","902b27a5fd2e5f17e5340e350afa037549ce9faa","02c37ccdfccfe03560a4bf069f46e8ae3a5d2348","b627963a9bac33fa6e3de0f9469b2fa5ecdef6ae","36bba4d26ecf02623a51c6241133c4290551e27f","d117643019d665a29ce8a7b812268fb8d3e5aadb","6239b4d374539c940cffa698e0993d199918a2fc","7c1b25518dee1e30b5a6eaa1ea8e4a3780c24d0c","a4aff23b9a58b598524a71f09aa67994083a9c83","c30af6fa5df14e1ba9355b60a9214937f6f18990","ca16a95cd38707bad2dc524bb3086b3c0cb3e372")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8","902b27a5fd2e5f17e5340e350afa037549ce9faa","02c37ccdfccfe03560a4bf069f46e8ae3a5d2348","b627963a9bac33fa6e3de0f9469b2fa5ecdef6ae","36bba4d26ecf02623a51c6241133c4290551e27f","d117643019d665a29ce8a7b812268fb8d3e5aadb","6239b4d374539c940cffa698e0993d199918a2fc","7c1b25518dee1e30b5a6eaa1ea8e4a3780c24d0c","a4aff23b9a58b598524a71f09aa67994083a9c83","c30af6fa5df14e1ba9355b60a9214937f6f18990","ca16a95cd38707bad2dc524bb3086b3c0cb3e372")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8","902b27a5fd2e5f17e5340e350afa037549ce9faa","02c37ccdfccfe03560a4bf069f46e8ae3a5d2348","b627963a9bac33fa6e3de0f9469b2fa5ecdef6ae","36bba4d26ecf02623a51c6241133c4290551e27f","d117643019d665a29ce8a7b812268fb8d3e5aadb","6239b4d374539c940cffa698e0993d199918a2fc","7c1b25518dee1e30b5a6eaa1ea8e4a3780c24d0c","a4aff23b9a58b598524a71f09aa67994083a9c83","c30af6fa5df14e1ba9355b60a9214937f6f18990","ca16a95cd38707bad2dc524bb3086b3c0cb3e372")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8","902b27a5fd2e5f17e5340e350afa037549ce9faa","02c37ccdfccfe03560a4bf069f46e8ae3a5d2348","b627963a9bac33fa6e3de0f9469b2fa5ecdef6ae","36bba4d26ecf02623a51c6241133c4290551e27f","d117643019d665a29ce8a7b812268fb8d3e5aadb","6239b4d374539c940cffa698e0993d199918a2fc","7c1b25518dee1e30b5a6eaa1ea8e4a3780c24d0c","a4aff23b9a58b598524a71f09aa67994083a9c83","c30af6fa5df14e1ba9355b60a9214937f6f18990","ca16a95cd38707bad2dc524bb3086b3c0cb3e372")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8","902b27a5fd2e5f17e5340e350afa037549ce9faa","02c37ccdfccfe03560a4bf069f46e8ae3a5d2348","b627963a9bac33fa6e3de0f9469b2fa5ecdef6ae","36bba4d26ecf02623a51c6241133c4290551e27f","d117643019d665a29ce8a7b812268fb8d3e5aadb","6239b4d374539c940cffa698e0993d199918a2fc","7c1b25518dee1e30b5a6eaa1ea8e4a3780c24d0c","a4aff23b9a58b598524a71f09aa67994083a9c83","c30af6fa5df14e1ba9355b60a9214937f6f18990","ca16a95cd38707bad2dc524bb3086b3c0cb3e372")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8","902b27a5fd2e5f17e5340e350afa037549ce9faa","02c37ccdfccfe03560a4bf069f46e8ae3a5d2348","b627963a9bac33fa6e3de0f9469b2fa5ecdef6ae","36bba4d26ecf02623a51c6241133c4290551e27f","d117643019d665a29ce8a7b812268fb8d3e5aadb","6239b4d374539c940cffa698e0993d199918a2fc","7c1b25518dee1e30b5a6eaa1ea8e4a3780c24d0c","a4aff23b9a58b598524a71f09aa67994083a9c83","c30af6fa5df14e1ba9355b60a9214937f6f18990","ca16a95cd38707bad2dc524bb3086b3c0cb3e372")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8","902b27a5fd2e5f17e5340e350afa037549ce9faa","02c37ccdfccfe03560a4bf069f46e8ae3a5d2348","b627963a9bac33fa6e3de0f9469b2fa5ecdef6ae","36bba4d26ecf02623a51c6241133c4290551e27f","d117643019d665a29ce8a7b812268fb8d3e5aadb","6239b4d374539c940cffa698e0993d199918a2fc","7c1b25518dee1e30b5a6eaa1ea8e4a3780c24d0c","a4aff23b9a58b598524a71f09aa67994083a9c83","c30af6fa5df14e1ba9355b60a9214937f6f18990","ca16a95cd38707bad2dc524bb3086b3c0cb3e372")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8","902b27a5fd2e5f17e5340e350afa037549ce9faa","02c37ccdfccfe03560a4bf069f46e8ae3a5d2348","b627963a9bac33fa6e3de0f9469b2fa5ecdef6ae","36bba4d26ecf02623a51c6241133c4290551e27f","d117643019d665a29ce8a7b812268fb8d3e5aadb","6239b4d374539c940cffa698e0993d199918a2fc","7c1b25518dee1e30b5a6eaa1ea8e4a3780c24d0c","a4aff23b9a58b598524a71f09aa67994083a9c83","c30af6fa5df14e1ba9355b60a9214937f6f18990","ca16a95cd38707bad2dc524bb3086b3c0cb3e372")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8","902b27a5fd2e5f17e5340e350afa037549ce9faa","02c37ccdfccfe03560a4bf069f46e8ae3a5d2348","b627963a9bac33fa6e3de0f9469b2fa5ecdef6ae","36bba4d26ecf02623a51c6241133c4290551e27f","d117643019d665a29ce8a7b812268fb8d3e5aadb","6239b4d374539c940cffa698e0993d199918a2fc","7c1b25518dee1e30b5a6eaa1ea8e4a3780c24d0c","a4aff23b9a58b598524a71f09aa67994083a9c83","c30af6fa5df14e1ba9355b60a9214937f6f18990","ca16a95cd38707bad2dc524bb3086b3c0cb3e372")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8","902b27a5fd2e5f17e5340e350afa037549ce9faa","02c37ccdfccfe03560a4bf069f46e8ae3a5d2348","b627963a9bac33fa6e3de0f9469b2fa5ecdef6ae","36bba4d26ecf02623a51c6241133c4290551e27f","d117643019d665a29ce8a7b812268fb8d3e5aadb","6239b4d374539c940cffa698e0993d199918a2fc","7c1b25518dee1e30b5a6eaa1ea8e4a3780c24d0c","a4aff23b9a58b598524a71f09aa67994083a9c83","c30af6fa5df14e1ba9355b60a9214937f6f18990","ca16a95cd38707bad2dc524bb3086b3c0cb3e372")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8","902b27a5fd2e5f17e5340e350afa037549ce9faa","02c37ccdfccfe03560a4bf069f46e8ae3a5d2348","b627963a9bac33fa6e3de0f9469b2fa5ecdef6ae","36bba4d26ecf02623a51c6241133c4290551e27f","d117643019d665a29ce8a7b812268fb8d3e5aadb","6239b4d374539c940cffa698e0993d199918a2fc","7c1b25518dee1e30b5a6eaa1ea8e4a3780c24d0c","a4aff23b9a58b598524a71f09aa67994083a9c83","c30af6fa5df14e1ba9355b60a9214937f6f18990","ca16a95cd38707bad2dc524bb3086b3c0cb3e372")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8","902b27a5fd2e5f17e5340e350afa037549ce9faa","02c37ccdfccfe03560a4bf069f46e8ae3a5d2348","b627963a9bac33fa6e3de0f9469b2fa5ecdef6ae","36bba4d26ecf02623a51c6241133c4290551e27f","d117643019d665a29ce8a7b812268fb8d3e5aadb","6239b4d374539c940cffa698e0993d199918a2fc","7c1b25518dee1e30b5a6eaa1ea8e4a3780c24d0c","a4aff23b9a58b598524a71f09aa67994083a9c83","c30af6fa5df14e1ba9355b60a9214937f6f18990","ca16a95cd38707bad2dc524bb3086b3c0cb3e372")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8","902b27a5fd2e5f17e5340e350afa037549ce9faa","02c37ccdfccfe03560a4bf069f46e8ae3a5d2348","b627963a9bac33fa6e3de0f9469b2fa5ecdef6ae","36bba4d26ecf02623a51c6241133c4290551e27f","d117643019d665a29ce8a7b812268fb8d3e5aadb","6239b4d374539c940cffa698e0993d199918a2fc","7c1b25518dee1e30b5a6eaa1ea8e4a3780c24d0c","a4aff23b9a58b598524a71f09aa67994083a9c83","c30af6fa5df14e1ba9355b60a9214937f6f18990","ca16a95cd38707bad2dc524bb3086b3c0cb3e372")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8","902b27a5fd2e5f17e5340e350afa037549ce9faa","02c37ccdfccfe03560a4bf069f46e8ae3a5d2348","b627963a9bac33fa6e3de0f9469b2fa5ecdef6ae","36bba4d26ecf02623a51c6241133c4290551e27f","d117643019d665a29ce8a7b812268fb8d3e5aadb","6239b4d374539c940cffa698e0993d199918a2fc","7c1b25518dee1e30b5a6eaa1ea8e4a3780c24d0c","a4aff23b9a58b598524a71f09aa67994083a9c83","c30af6fa5df14e1ba9355b60a9214937f6f18990","ca16a95cd38707bad2dc524bb3086b3c0cb3e372")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8","902b27a5fd2e5f17e5340e350afa037549ce9faa","02c37ccdfccfe03560a4bf069f46e8ae3a5d2348","b627963a9bac33fa6e3de0f9469b2fa5ecdef6ae","36bba4d26ecf02623a51c6241133c4290551e27f","d117643019d665a29ce8a7b812268fb8d3e5aadb","6239b4d374539c940cffa698e0993d199918a2fc","7c1b25518dee1e30b5a6eaa1ea8e4a3780c24d0c","a4aff23b9a58b598524a71f09aa67994083a9c83","c30af6fa5df14e1ba9355b60a9214937f6f18990","ca16a95cd38707bad2dc524bb3086b3c0cb3e372")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8","902b27a5fd2e5f17e5340e350afa037549ce9faa","02c37ccdfccfe03560a4bf069f46e8ae3a5d2348","b627963a9bac33fa6e3de0f9469b2fa5ecdef6ae","36bba4d26ecf02623a51c6241133c4290551e27f","d117643019d665a29ce8a7b812268fb8d3e5aadb","6239b4d374539c940cffa698e0993d199918a2fc","7c1b25518dee1e30b5a6eaa1ea8e4a3780c24d0c","a4aff23b9a58b598524a71f09aa67994083a9c83","c30af6fa5df14e1ba9355b60a9214937f6f18990","ca16a95cd38707bad2dc524bb3086b3c0cb3e372")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8","902b27a5fd2e5f17e5340e350afa037549ce9faa","02c37ccdfccfe03560a4bf069f46e8ae3a5d2348","b627963a9bac33fa6e3de0f9469b2fa5ecdef6ae","36bba4d26ecf02623a51c6241133c4290551e27f","d117643019d665a29ce8a7b812268fb8d3e5aadb","6239b4d374539c940cffa698e0993d199918a2fc","7c1b25518dee1e30b5a6eaa1ea8e4a3780c24d0c","a4aff23b9a58b598524a71f09aa67994083a9c83","c30af6fa5df14e1ba9355b60a9214937f6f18990","ca16a95cd38707bad2dc524bb3086b3c0cb3e372")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8","902b27a5fd2e5f17e5340e350afa037549ce9faa","02c37ccdfccfe03560a4bf069f46e8ae3a5d2348","b627963a9bac33fa6e3de0f9469b2fa5ecdef6ae","36bba4d26ecf02623a51c6241133c4290551e27f","d117643019d665a29ce8a7b812268fb8d3e5aadb","6239b4d374539c940cffa698e0993d199918a2fc","7c1b25518dee1e30b5a6eaa1ea8e4a3780c24d0c","a4aff23b9a58b598524a71f09aa67994083a9c83","c30af6fa5df14e1ba9355b60a9214937f6f18990","ca16a95cd38707bad2dc524bb3086b3c0cb3e372")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8","902b27a5fd2e5f17e5340e350afa037549ce9faa","02c37ccdfccfe03560a4bf069f46e8ae3a5d2348","b627963a9bac33fa6e3de0f9469b2fa5ecdef6ae","36bba4d26ecf02623a51c6241133c4290551e27f","d117643019d665a29ce8a7b812268fb8d3e5aadb","6239b4d374539c940cffa698e0993d199918a2fc","7c1b25518dee1e30b5a6eaa1ea8e4a3780c24d0c","a4aff23b9a58b598524a71f09aa67994083a9c83","c30af6fa5df14e1ba9355b60a9214937f6f18990","ca16a95cd38707bad2dc524bb3086b3c0cb3e372")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8","902b27a5fd2e5f17e5340e350afa037549ce9faa","02c37ccdfccfe03560a4bf069f46e8ae3a5d2348","b627963a9bac33fa6e3de0f9469b2fa5ecdef6ae","36bba4d26ecf02623a51c6241133c4290551e27f","d117643019d665a29ce8a7b812268fb8d3e5aadb","6239b4d374539c940cffa698e0993d199918a2fc","7c1b25518dee1e30b5a6eaa1ea8e4a3780c24d0c","a4aff23b9a58b598524a71f09aa67994083a9c83","c30af6fa5df14e1ba9355b60a9214937f6f18990","ca16a95cd38707bad2dc524bb3086b3c0cb3e372")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwitchert/sync")
