index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "download.datatabletemplate.xyz" OR destinationhostname CONTAINS "check.datatabletemplate.shop" OR destinationhostname CONTAINS "download.face-online.world" OR destinationhostname CONTAINS "root.security-update.xyz" OR destinationhostname CONTAINS "real-update.xyz" OR destinationhostname CONTAINS "root.chkstate.online" OR destinationhostname CONTAINS "secondshop.online" OR destinationhostname CONTAINS "signsafe.site" OR destinationhostname CONTAINS "secondshop.store" OR destinationhostname CONTAINS "botsc.autoupdate.xyz" OR destinationhostname CONTAINS "first.system-update.xyz" OR destinationhostname CONTAINS "image-support.xyz" OR destinationhostname CONTAINS "pre.alwayswait.site" OR destinationhostname CONTAINS "second.systemupdate.cloud" OR destinationhostname CONTAINS "second.awaitingfor.online" OR destinationhostname CONTAINS "safefor.xyz" OR destinationhostname CONTAINS "readysafe.xyz" OR destinationhostname CONTAINS "instant-update.online" OR destinationhostname CONTAINS "signsafe.xyz" OR destinationhostname CONTAINS "system.updatecheck.store" OR destinationhostname CONTAINS "dataupload.store" OR destinationhostname CONTAINS "safeupload.online" OR destinationhostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "download.datatabletemplate.xyz" OR sourcentdomain CONTAINS "check.datatabletemplate.shop" OR sourcentdomain CONTAINS "download.face-online.world" OR sourcentdomain CONTAINS "root.security-update.xyz" OR sourcentdomain CONTAINS "real-update.xyz" OR sourcentdomain CONTAINS "root.chkstate.online" OR sourcentdomain CONTAINS "secondshop.online" OR sourcentdomain CONTAINS "signsafe.site" OR sourcentdomain CONTAINS "secondshop.store" OR sourcentdomain CONTAINS "botsc.autoupdate.xyz" OR sourcentdomain CONTAINS "first.system-update.xyz" OR sourcentdomain CONTAINS "image-support.xyz" OR sourcentdomain CONTAINS "pre.alwayswait.site" OR sourcentdomain CONTAINS "second.systemupdate.cloud" OR sourcentdomain CONTAINS "second.awaitingfor.online" OR sourcentdomain CONTAINS "safefor.xyz" OR sourcentdomain CONTAINS "readysafe.xyz" OR sourcentdomain CONTAINS "instant-update.online" OR sourcentdomain CONTAINS "signsafe.xyz" OR sourcentdomain CONTAINS "system.updatecheck.store" OR sourcentdomain CONTAINS "dataupload.store" OR sourcentdomain CONTAINS "safeupload.online" OR sourcentdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "download.datatabletemplate.xyz" OR sourcehostname CONTAINS "check.datatabletemplate.shop" OR sourcehostname CONTAINS "download.face-online.world" OR sourcehostname CONTAINS "root.security-update.xyz" OR sourcehostname CONTAINS "real-update.xyz" OR sourcehostname CONTAINS "root.chkstate.online" OR sourcehostname CONTAINS "secondshop.online" OR sourcehostname CONTAINS "signsafe.site" OR sourcehostname CONTAINS "secondshop.store" OR sourcehostname CONTAINS "botsc.autoupdate.xyz" OR sourcehostname CONTAINS "first.system-update.xyz" OR sourcehostname CONTAINS "image-support.xyz" OR sourcehostname CONTAINS "pre.alwayswait.site" OR sourcehostname CONTAINS "second.systemupdate.cloud" OR sourcehostname CONTAINS "second.awaitingfor.online" OR sourcehostname CONTAINS "safefor.xyz" OR sourcehostname CONTAINS "readysafe.xyz" OR sourcehostname CONTAINS "instant-update.online" OR sourcehostname CONTAINS "signsafe.xyz" OR sourcehostname CONTAINS "system.updatecheck.store" OR sourcehostname CONTAINS "dataupload.store" OR sourcehostname CONTAINS "safeupload.online" OR sourcehostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "download.datatabletemplate.xyz" OR destinationntdomain CONTAINS "check.datatabletemplate.shop" OR destinationntdomain CONTAINS "download.face-online.world" OR destinationntdomain CONTAINS "root.security-update.xyz" OR destinationntdomain CONTAINS "real-update.xyz" OR destinationntdomain CONTAINS "root.chkstate.online" OR destinationntdomain CONTAINS "secondshop.online" OR destinationntdomain CONTAINS "signsafe.site" OR destinationntdomain CONTAINS "secondshop.store" OR destinationntdomain CONTAINS "botsc.autoupdate.xyz" OR destinationntdomain CONTAINS "first.system-update.xyz" OR destinationntdomain CONTAINS "image-support.xyz" OR destinationntdomain CONTAINS "pre.alwayswait.site" OR destinationntdomain CONTAINS "second.systemupdate.cloud" OR destinationntdomain CONTAINS "second.awaitingfor.online" OR destinationntdomain CONTAINS "safefor.xyz" OR destinationntdomain CONTAINS "readysafe.xyz" OR destinationntdomain CONTAINS "instant-update.online" OR destinationntdomain CONTAINS "signsafe.xyz" OR destinationntdomain CONTAINS "system.updatecheck.store" OR destinationntdomain CONTAINS "dataupload.store" OR destinationntdomain CONTAINS "safeupload.online" OR destinationntdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "download.datatabletemplate.xyz" OR requesturl CONTAINS "check.datatabletemplate.shop" OR requesturl CONTAINS "download.face-online.world" OR requesturl CONTAINS "root.security-update.xyz" OR requesturl CONTAINS "real-update.xyz" OR requesturl CONTAINS "root.chkstate.online" OR requesturl CONTAINS "secondshop.online" OR requesturl CONTAINS "signsafe.site" OR requesturl CONTAINS "secondshop.store" OR requesturl CONTAINS "botsc.autoupdate.xyz" OR requesturl CONTAINS "first.system-update.xyz" OR requesturl CONTAINS "image-support.xyz" OR requesturl CONTAINS "pre.alwayswait.site" OR requesturl CONTAINS "second.systemupdate.cloud" OR requesturl CONTAINS "second.awaitingfor.online" OR requesturl CONTAINS "safefor.xyz" OR requesturl CONTAINS "readysafe.xyz" OR requesturl CONTAINS "instant-update.online" OR requesturl CONTAINS "signsafe.xyz" OR requesturl CONTAINS "system.updatecheck.store" OR requesturl CONTAINS "dataupload.store" OR requesturl CONTAINS "safeupload.online" OR requesturl CONTAINS "filedrive.online")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "download.datatabletemplate.xyz" OR destinationhostname CONTAINS "check.datatabletemplate.shop" OR destinationhostname CONTAINS "download.face-online.world" OR destinationhostname CONTAINS "root.security-update.xyz" OR destinationhostname CONTAINS "real-update.xyz" OR destinationhostname CONTAINS "root.chkstate.online" OR destinationhostname CONTAINS "secondshop.online" OR destinationhostname CONTAINS "signsafe.site" OR destinationhostname CONTAINS "secondshop.store" OR destinationhostname CONTAINS "botsc.autoupdate.xyz" OR destinationhostname CONTAINS "first.system-update.xyz" OR destinationhostname CONTAINS "image-support.xyz" OR destinationhostname CONTAINS "pre.alwayswait.site" OR destinationhostname CONTAINS "second.systemupdate.cloud" OR destinationhostname CONTAINS "second.awaitingfor.online" OR destinationhostname CONTAINS "safefor.xyz" OR destinationhostname CONTAINS "readysafe.xyz" OR destinationhostname CONTAINS "instant-update.online" OR destinationhostname CONTAINS "signsafe.xyz" OR destinationhostname CONTAINS "system.updatecheck.store" OR destinationhostname CONTAINS "dataupload.store" OR destinationhostname CONTAINS "safeupload.online" OR destinationhostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "download.datatabletemplate.xyz" OR sourcentdomain CONTAINS "check.datatabletemplate.shop" OR sourcentdomain CONTAINS "download.face-online.world" OR sourcentdomain CONTAINS "root.security-update.xyz" OR sourcentdomain CONTAINS "real-update.xyz" OR sourcentdomain CONTAINS "root.chkstate.online" OR sourcentdomain CONTAINS "secondshop.online" OR sourcentdomain CONTAINS "signsafe.site" OR sourcentdomain CONTAINS "secondshop.store" OR sourcentdomain CONTAINS "botsc.autoupdate.xyz" OR sourcentdomain CONTAINS "first.system-update.xyz" OR sourcentdomain CONTAINS "image-support.xyz" OR sourcentdomain CONTAINS "pre.alwayswait.site" OR sourcentdomain CONTAINS "second.systemupdate.cloud" OR sourcentdomain CONTAINS "second.awaitingfor.online" OR sourcentdomain CONTAINS "safefor.xyz" OR sourcentdomain CONTAINS "readysafe.xyz" OR sourcentdomain CONTAINS "instant-update.online" OR sourcentdomain CONTAINS "signsafe.xyz" OR sourcentdomain CONTAINS "system.updatecheck.store" OR sourcentdomain CONTAINS "dataupload.store" OR sourcentdomain CONTAINS "safeupload.online" OR sourcentdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "download.datatabletemplate.xyz" OR sourcehostname CONTAINS "check.datatabletemplate.shop" OR sourcehostname CONTAINS "download.face-online.world" OR sourcehostname CONTAINS "root.security-update.xyz" OR sourcehostname CONTAINS "real-update.xyz" OR sourcehostname CONTAINS "root.chkstate.online" OR sourcehostname CONTAINS "secondshop.online" OR sourcehostname CONTAINS "signsafe.site" OR sourcehostname CONTAINS "secondshop.store" OR sourcehostname CONTAINS "botsc.autoupdate.xyz" OR sourcehostname CONTAINS "first.system-update.xyz" OR sourcehostname CONTAINS "image-support.xyz" OR sourcehostname CONTAINS "pre.alwayswait.site" OR sourcehostname CONTAINS "second.systemupdate.cloud" OR sourcehostname CONTAINS "second.awaitingfor.online" OR sourcehostname CONTAINS "safefor.xyz" OR sourcehostname CONTAINS "readysafe.xyz" OR sourcehostname CONTAINS "instant-update.online" OR sourcehostname CONTAINS "signsafe.xyz" OR sourcehostname CONTAINS "system.updatecheck.store" OR sourcehostname CONTAINS "dataupload.store" OR sourcehostname CONTAINS "safeupload.online" OR sourcehostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "download.datatabletemplate.xyz" OR destinationntdomain CONTAINS "check.datatabletemplate.shop" OR destinationntdomain CONTAINS "download.face-online.world" OR destinationntdomain CONTAINS "root.security-update.xyz" OR destinationntdomain CONTAINS "real-update.xyz" OR destinationntdomain CONTAINS "root.chkstate.online" OR destinationntdomain CONTAINS "secondshop.online" OR destinationntdomain CONTAINS "signsafe.site" OR destinationntdomain CONTAINS "secondshop.store" OR destinationntdomain CONTAINS "botsc.autoupdate.xyz" OR destinationntdomain CONTAINS "first.system-update.xyz" OR destinationntdomain CONTAINS "image-support.xyz" OR destinationntdomain CONTAINS "pre.alwayswait.site" OR destinationntdomain CONTAINS "second.systemupdate.cloud" OR destinationntdomain CONTAINS "second.awaitingfor.online" OR destinationntdomain CONTAINS "safefor.xyz" OR destinationntdomain CONTAINS "readysafe.xyz" OR destinationntdomain CONTAINS "instant-update.online" OR destinationntdomain CONTAINS "signsafe.xyz" OR destinationntdomain CONTAINS "system.updatecheck.store" OR destinationntdomain CONTAINS "dataupload.store" OR destinationntdomain CONTAINS "safeupload.online" OR destinationntdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "download.datatabletemplate.xyz" OR requesturl CONTAINS "check.datatabletemplate.shop" OR requesturl CONTAINS "download.face-online.world" OR requesturl CONTAINS "root.security-update.xyz" OR requesturl CONTAINS "real-update.xyz" OR requesturl CONTAINS "root.chkstate.online" OR requesturl CONTAINS "secondshop.online" OR requesturl CONTAINS "signsafe.site" OR requesturl CONTAINS "secondshop.store" OR requesturl CONTAINS "botsc.autoupdate.xyz" OR requesturl CONTAINS "first.system-update.xyz" OR requesturl CONTAINS "image-support.xyz" OR requesturl CONTAINS "pre.alwayswait.site" OR requesturl CONTAINS "second.systemupdate.cloud" OR requesturl CONTAINS "second.awaitingfor.online" OR requesturl CONTAINS "safefor.xyz" OR requesturl CONTAINS "readysafe.xyz" OR requesturl CONTAINS "instant-update.online" OR requesturl CONTAINS "signsafe.xyz" OR requesturl CONTAINS "system.updatecheck.store" OR requesturl CONTAINS "dataupload.store" OR requesturl CONTAINS "safeupload.online" OR requesturl CONTAINS "filedrive.online")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "download.datatabletemplate.xyz" OR destinationhostname CONTAINS "check.datatabletemplate.shop" OR destinationhostname CONTAINS "download.face-online.world" OR destinationhostname CONTAINS "root.security-update.xyz" OR destinationhostname CONTAINS "real-update.xyz" OR destinationhostname CONTAINS "root.chkstate.online" OR destinationhostname CONTAINS "secondshop.online" OR destinationhostname CONTAINS "signsafe.site" OR destinationhostname CONTAINS "secondshop.store" OR destinationhostname CONTAINS "botsc.autoupdate.xyz" OR destinationhostname CONTAINS "first.system-update.xyz" OR destinationhostname CONTAINS "image-support.xyz" OR destinationhostname CONTAINS "pre.alwayswait.site" OR destinationhostname CONTAINS "second.systemupdate.cloud" OR destinationhostname CONTAINS "second.awaitingfor.online" OR destinationhostname CONTAINS "safefor.xyz" OR destinationhostname CONTAINS "readysafe.xyz" OR destinationhostname CONTAINS "instant-update.online" OR destinationhostname CONTAINS "signsafe.xyz" OR destinationhostname CONTAINS "system.updatecheck.store" OR destinationhostname CONTAINS "dataupload.store" OR destinationhostname CONTAINS "safeupload.online" OR destinationhostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "download.datatabletemplate.xyz" OR sourcentdomain CONTAINS "check.datatabletemplate.shop" OR sourcentdomain CONTAINS "download.face-online.world" OR sourcentdomain CONTAINS "root.security-update.xyz" OR sourcentdomain CONTAINS "real-update.xyz" OR sourcentdomain CONTAINS "root.chkstate.online" OR sourcentdomain CONTAINS "secondshop.online" OR sourcentdomain CONTAINS "signsafe.site" OR sourcentdomain CONTAINS "secondshop.store" OR sourcentdomain CONTAINS "botsc.autoupdate.xyz" OR sourcentdomain CONTAINS "first.system-update.xyz" OR sourcentdomain CONTAINS "image-support.xyz" OR sourcentdomain CONTAINS "pre.alwayswait.site" OR sourcentdomain CONTAINS "second.systemupdate.cloud" OR sourcentdomain CONTAINS "second.awaitingfor.online" OR sourcentdomain CONTAINS "safefor.xyz" OR sourcentdomain CONTAINS "readysafe.xyz" OR sourcentdomain CONTAINS "instant-update.online" OR sourcentdomain CONTAINS "signsafe.xyz" OR sourcentdomain CONTAINS "system.updatecheck.store" OR sourcentdomain CONTAINS "dataupload.store" OR sourcentdomain CONTAINS "safeupload.online" OR sourcentdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "download.datatabletemplate.xyz" OR sourcehostname CONTAINS "check.datatabletemplate.shop" OR sourcehostname CONTAINS "download.face-online.world" OR sourcehostname CONTAINS "root.security-update.xyz" OR sourcehostname CONTAINS "real-update.xyz" OR sourcehostname CONTAINS "root.chkstate.online" OR sourcehostname CONTAINS "secondshop.online" OR sourcehostname CONTAINS "signsafe.site" OR sourcehostname CONTAINS "secondshop.store" OR sourcehostname CONTAINS "botsc.autoupdate.xyz" OR sourcehostname CONTAINS "first.system-update.xyz" OR sourcehostname CONTAINS "image-support.xyz" OR sourcehostname CONTAINS "pre.alwayswait.site" OR sourcehostname CONTAINS "second.systemupdate.cloud" OR sourcehostname CONTAINS "second.awaitingfor.online" OR sourcehostname CONTAINS "safefor.xyz" OR sourcehostname CONTAINS "readysafe.xyz" OR sourcehostname CONTAINS "instant-update.online" OR sourcehostname CONTAINS "signsafe.xyz" OR sourcehostname CONTAINS "system.updatecheck.store" OR sourcehostname CONTAINS "dataupload.store" OR sourcehostname CONTAINS "safeupload.online" OR sourcehostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "download.datatabletemplate.xyz" OR destinationntdomain CONTAINS "check.datatabletemplate.shop" OR destinationntdomain CONTAINS "download.face-online.world" OR destinationntdomain CONTAINS "root.security-update.xyz" OR destinationntdomain CONTAINS "real-update.xyz" OR destinationntdomain CONTAINS "root.chkstate.online" OR destinationntdomain CONTAINS "secondshop.online" OR destinationntdomain CONTAINS "signsafe.site" OR destinationntdomain CONTAINS "secondshop.store" OR destinationntdomain CONTAINS "botsc.autoupdate.xyz" OR destinationntdomain CONTAINS "first.system-update.xyz" OR destinationntdomain CONTAINS "image-support.xyz" OR destinationntdomain CONTAINS "pre.alwayswait.site" OR destinationntdomain CONTAINS "second.systemupdate.cloud" OR destinationntdomain CONTAINS "second.awaitingfor.online" OR destinationntdomain CONTAINS "safefor.xyz" OR destinationntdomain CONTAINS "readysafe.xyz" OR destinationntdomain CONTAINS "instant-update.online" OR destinationntdomain CONTAINS "signsafe.xyz" OR destinationntdomain CONTAINS "system.updatecheck.store" OR destinationntdomain CONTAINS "dataupload.store" OR destinationntdomain CONTAINS "safeupload.online" OR destinationntdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND (requesturl CONTAINS "download.datatabletemplate.xyz" OR requesturl CONTAINS "check.datatabletemplate.shop" OR requesturl CONTAINS "download.face-online.world" OR requesturl CONTAINS "root.security-update.xyz" OR requesturl CONTAINS "real-update.xyz" OR requesturl CONTAINS "root.chkstate.online" OR requesturl CONTAINS "secondshop.online" OR requesturl CONTAINS "signsafe.site" OR requesturl CONTAINS "secondshop.store" OR requesturl CONTAINS "botsc.autoupdate.xyz" OR requesturl CONTAINS "first.system-update.xyz" OR requesturl CONTAINS "image-support.xyz" OR requesturl CONTAINS "pre.alwayswait.site" OR requesturl CONTAINS "second.systemupdate.cloud" OR requesturl CONTAINS "second.awaitingfor.online" OR requesturl CONTAINS "safefor.xyz" OR requesturl CONTAINS "readysafe.xyz" OR requesturl CONTAINS "instant-update.online" OR requesturl CONTAINS "signsafe.xyz" OR requesturl CONTAINS "system.updatecheck.store" OR requesturl CONTAINS "dataupload.store" OR requesturl CONTAINS "safeupload.online" OR requesturl CONTAINS "filedrive.online")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "download.datatabletemplate.xyz" OR destinationhostname CONTAINS "check.datatabletemplate.shop" OR destinationhostname CONTAINS "download.face-online.world" OR destinationhostname CONTAINS "root.security-update.xyz" OR destinationhostname CONTAINS "real-update.xyz" OR destinationhostname CONTAINS "root.chkstate.online" OR destinationhostname CONTAINS "secondshop.online" OR destinationhostname CONTAINS "signsafe.site" OR destinationhostname CONTAINS "secondshop.store" OR destinationhostname CONTAINS "botsc.autoupdate.xyz" OR destinationhostname CONTAINS "first.system-update.xyz" OR destinationhostname CONTAINS "image-support.xyz" OR destinationhostname CONTAINS "pre.alwayswait.site" OR destinationhostname CONTAINS "second.systemupdate.cloud" OR destinationhostname CONTAINS "second.awaitingfor.online" OR destinationhostname CONTAINS "safefor.xyz" OR destinationhostname CONTAINS "readysafe.xyz" OR destinationhostname CONTAINS "instant-update.online" OR destinationhostname CONTAINS "signsafe.xyz" OR destinationhostname CONTAINS "system.updatecheck.store" OR destinationhostname CONTAINS "dataupload.store" OR destinationhostname CONTAINS "safeupload.online" OR destinationhostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "download.datatabletemplate.xyz" OR sourcentdomain CONTAINS "check.datatabletemplate.shop" OR sourcentdomain CONTAINS "download.face-online.world" OR sourcentdomain CONTAINS "root.security-update.xyz" OR sourcentdomain CONTAINS "real-update.xyz" OR sourcentdomain CONTAINS "root.chkstate.online" OR sourcentdomain CONTAINS "secondshop.online" OR sourcentdomain CONTAINS "signsafe.site" OR sourcentdomain CONTAINS "secondshop.store" OR sourcentdomain CONTAINS "botsc.autoupdate.xyz" OR sourcentdomain CONTAINS "first.system-update.xyz" OR sourcentdomain CONTAINS "image-support.xyz" OR sourcentdomain CONTAINS "pre.alwayswait.site" OR sourcentdomain CONTAINS "second.systemupdate.cloud" OR sourcentdomain CONTAINS "second.awaitingfor.online" OR sourcentdomain CONTAINS "safefor.xyz" OR sourcentdomain CONTAINS "readysafe.xyz" OR sourcentdomain CONTAINS "instant-update.online" OR sourcentdomain CONTAINS "signsafe.xyz" OR sourcentdomain CONTAINS "system.updatecheck.store" OR sourcentdomain CONTAINS "dataupload.store" OR sourcentdomain CONTAINS "safeupload.online" OR sourcentdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "download.datatabletemplate.xyz" OR sourcehostname CONTAINS "check.datatabletemplate.shop" OR sourcehostname CONTAINS "download.face-online.world" OR sourcehostname CONTAINS "root.security-update.xyz" OR sourcehostname CONTAINS "real-update.xyz" OR sourcehostname CONTAINS "root.chkstate.online" OR sourcehostname CONTAINS "secondshop.online" OR sourcehostname CONTAINS "signsafe.site" OR sourcehostname CONTAINS "secondshop.store" OR sourcehostname CONTAINS "botsc.autoupdate.xyz" OR sourcehostname CONTAINS "first.system-update.xyz" OR sourcehostname CONTAINS "image-support.xyz" OR sourcehostname CONTAINS "pre.alwayswait.site" OR sourcehostname CONTAINS "second.systemupdate.cloud" OR sourcehostname CONTAINS "second.awaitingfor.online" OR sourcehostname CONTAINS "safefor.xyz" OR sourcehostname CONTAINS "readysafe.xyz" OR sourcehostname CONTAINS "instant-update.online" OR sourcehostname CONTAINS "signsafe.xyz" OR sourcehostname CONTAINS "system.updatecheck.store" OR sourcehostname CONTAINS "dataupload.store" OR sourcehostname CONTAINS "safeupload.online" OR sourcehostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "download.datatabletemplate.xyz" OR destinationntdomain CONTAINS "check.datatabletemplate.shop" OR destinationntdomain CONTAINS "download.face-online.world" OR destinationntdomain CONTAINS "root.security-update.xyz" OR destinationntdomain CONTAINS "real-update.xyz" OR destinationntdomain CONTAINS "root.chkstate.online" OR destinationntdomain CONTAINS "secondshop.online" OR destinationntdomain CONTAINS "signsafe.site" OR destinationntdomain CONTAINS "secondshop.store" OR destinationntdomain CONTAINS "botsc.autoupdate.xyz" OR destinationntdomain CONTAINS "first.system-update.xyz" OR destinationntdomain CONTAINS "image-support.xyz" OR destinationntdomain CONTAINS "pre.alwayswait.site" OR destinationntdomain CONTAINS "second.systemupdate.cloud" OR destinationntdomain CONTAINS "second.awaitingfor.online" OR destinationntdomain CONTAINS "safefor.xyz" OR destinationntdomain CONTAINS "readysafe.xyz" OR destinationntdomain CONTAINS "instant-update.online" OR destinationntdomain CONTAINS "signsafe.xyz" OR destinationntdomain CONTAINS "system.updatecheck.store" OR destinationntdomain CONTAINS "dataupload.store" OR destinationntdomain CONTAINS "safeupload.online" OR destinationntdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND (requesturl CONTAINS "download.datatabletemplate.xyz" OR requesturl CONTAINS "check.datatabletemplate.shop" OR requesturl CONTAINS "download.face-online.world" OR requesturl CONTAINS "root.security-update.xyz" OR requesturl CONTAINS "real-update.xyz" OR requesturl CONTAINS "root.chkstate.online" OR requesturl CONTAINS "secondshop.online" OR requesturl CONTAINS "signsafe.site" OR requesturl CONTAINS "secondshop.store" OR requesturl CONTAINS "botsc.autoupdate.xyz" OR requesturl CONTAINS "first.system-update.xyz" OR requesturl CONTAINS "image-support.xyz" OR requesturl CONTAINS "pre.alwayswait.site" OR requesturl CONTAINS "second.systemupdate.cloud" OR requesturl CONTAINS "second.awaitingfor.online" OR requesturl CONTAINS "safefor.xyz" OR requesturl CONTAINS "readysafe.xyz" OR requesturl CONTAINS "instant-update.online" OR requesturl CONTAINS "signsafe.xyz" OR requesturl CONTAINS "system.updatecheck.store" OR requesturl CONTAINS "dataupload.store" OR requesturl CONTAINS "safeupload.online" OR requesturl CONTAINS "filedrive.online")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "download.datatabletemplate.xyz" OR destinationhostname CONTAINS "check.datatabletemplate.shop" OR destinationhostname CONTAINS "download.face-online.world" OR destinationhostname CONTAINS "root.security-update.xyz" OR destinationhostname CONTAINS "real-update.xyz" OR destinationhostname CONTAINS "root.chkstate.online" OR destinationhostname CONTAINS "secondshop.online" OR destinationhostname CONTAINS "signsafe.site" OR destinationhostname CONTAINS "secondshop.store" OR destinationhostname CONTAINS "botsc.autoupdate.xyz" OR destinationhostname CONTAINS "first.system-update.xyz" OR destinationhostname CONTAINS "image-support.xyz" OR destinationhostname CONTAINS "pre.alwayswait.site" OR destinationhostname CONTAINS "second.systemupdate.cloud" OR destinationhostname CONTAINS "second.awaitingfor.online" OR destinationhostname CONTAINS "safefor.xyz" OR destinationhostname CONTAINS "readysafe.xyz" OR destinationhostname CONTAINS "instant-update.online" OR destinationhostname CONTAINS "signsafe.xyz" OR destinationhostname CONTAINS "system.updatecheck.store" OR destinationhostname CONTAINS "dataupload.store" OR destinationhostname CONTAINS "safeupload.online" OR destinationhostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "download.datatabletemplate.xyz" OR sourcentdomain CONTAINS "check.datatabletemplate.shop" OR sourcentdomain CONTAINS "download.face-online.world" OR sourcentdomain CONTAINS "root.security-update.xyz" OR sourcentdomain CONTAINS "real-update.xyz" OR sourcentdomain CONTAINS "root.chkstate.online" OR sourcentdomain CONTAINS "secondshop.online" OR sourcentdomain CONTAINS "signsafe.site" OR sourcentdomain CONTAINS "secondshop.store" OR sourcentdomain CONTAINS "botsc.autoupdate.xyz" OR sourcentdomain CONTAINS "first.system-update.xyz" OR sourcentdomain CONTAINS "image-support.xyz" OR sourcentdomain CONTAINS "pre.alwayswait.site" OR sourcentdomain CONTAINS "second.systemupdate.cloud" OR sourcentdomain CONTAINS "second.awaitingfor.online" OR sourcentdomain CONTAINS "safefor.xyz" OR sourcentdomain CONTAINS "readysafe.xyz" OR sourcentdomain CONTAINS "instant-update.online" OR sourcentdomain CONTAINS "signsafe.xyz" OR sourcentdomain CONTAINS "system.updatecheck.store" OR sourcentdomain CONTAINS "dataupload.store" OR sourcentdomain CONTAINS "safeupload.online" OR sourcentdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "download.datatabletemplate.xyz" OR sourcehostname CONTAINS "check.datatabletemplate.shop" OR sourcehostname CONTAINS "download.face-online.world" OR sourcehostname CONTAINS "root.security-update.xyz" OR sourcehostname CONTAINS "real-update.xyz" OR sourcehostname CONTAINS "root.chkstate.online" OR sourcehostname CONTAINS "secondshop.online" OR sourcehostname CONTAINS "signsafe.site" OR sourcehostname CONTAINS "secondshop.store" OR sourcehostname CONTAINS "botsc.autoupdate.xyz" OR sourcehostname CONTAINS "first.system-update.xyz" OR sourcehostname CONTAINS "image-support.xyz" OR sourcehostname CONTAINS "pre.alwayswait.site" OR sourcehostname CONTAINS "second.systemupdate.cloud" OR sourcehostname CONTAINS "second.awaitingfor.online" OR sourcehostname CONTAINS "safefor.xyz" OR sourcehostname CONTAINS "readysafe.xyz" OR sourcehostname CONTAINS "instant-update.online" OR sourcehostname CONTAINS "signsafe.xyz" OR sourcehostname CONTAINS "system.updatecheck.store" OR sourcehostname CONTAINS "dataupload.store" OR sourcehostname CONTAINS "safeupload.online" OR sourcehostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "download.datatabletemplate.xyz" OR destinationntdomain CONTAINS "check.datatabletemplate.shop" OR destinationntdomain CONTAINS "download.face-online.world" OR destinationntdomain CONTAINS "root.security-update.xyz" OR destinationntdomain CONTAINS "real-update.xyz" OR destinationntdomain CONTAINS "root.chkstate.online" OR destinationntdomain CONTAINS "secondshop.online" OR destinationntdomain CONTAINS "signsafe.site" OR destinationntdomain CONTAINS "secondshop.store" OR destinationntdomain CONTAINS "botsc.autoupdate.xyz" OR destinationntdomain CONTAINS "first.system-update.xyz" OR destinationntdomain CONTAINS "image-support.xyz" OR destinationntdomain CONTAINS "pre.alwayswait.site" OR destinationntdomain CONTAINS "second.systemupdate.cloud" OR destinationntdomain CONTAINS "second.awaitingfor.online" OR destinationntdomain CONTAINS "safefor.xyz" OR destinationntdomain CONTAINS "readysafe.xyz" OR destinationntdomain CONTAINS "instant-update.online" OR destinationntdomain CONTAINS "signsafe.xyz" OR destinationntdomain CONTAINS "system.updatecheck.store" OR destinationntdomain CONTAINS "dataupload.store" OR destinationntdomain CONTAINS "safeupload.online" OR destinationntdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND (requesturl CONTAINS "download.datatabletemplate.xyz" OR requesturl CONTAINS "check.datatabletemplate.shop" OR requesturl CONTAINS "download.face-online.world" OR requesturl CONTAINS "root.security-update.xyz" OR requesturl CONTAINS "real-update.xyz" OR requesturl CONTAINS "root.chkstate.online" OR requesturl CONTAINS "secondshop.online" OR requesturl CONTAINS "signsafe.site" OR requesturl CONTAINS "secondshop.store" OR requesturl CONTAINS "botsc.autoupdate.xyz" OR requesturl CONTAINS "first.system-update.xyz" OR requesturl CONTAINS "image-support.xyz" OR requesturl CONTAINS "pre.alwayswait.site" OR requesturl CONTAINS "second.systemupdate.cloud" OR requesturl CONTAINS "second.awaitingfor.online" OR requesturl CONTAINS "safefor.xyz" OR requesturl CONTAINS "readysafe.xyz" OR requesturl CONTAINS "instant-update.online" OR requesturl CONTAINS "signsafe.xyz" OR requesturl CONTAINS "system.updatecheck.store" OR requesturl CONTAINS "dataupload.store" OR requesturl CONTAINS "safeupload.online" OR requesturl CONTAINS "filedrive.online")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "download.datatabletemplate.xyz" OR destinationhostname CONTAINS "check.datatabletemplate.shop" OR destinationhostname CONTAINS "download.face-online.world" OR destinationhostname CONTAINS "root.security-update.xyz" OR destinationhostname CONTAINS "real-update.xyz" OR destinationhostname CONTAINS "root.chkstate.online" OR destinationhostname CONTAINS "secondshop.online" OR destinationhostname CONTAINS "signsafe.site" OR destinationhostname CONTAINS "secondshop.store" OR destinationhostname CONTAINS "botsc.autoupdate.xyz" OR destinationhostname CONTAINS "first.system-update.xyz" OR destinationhostname CONTAINS "image-support.xyz" OR destinationhostname CONTAINS "pre.alwayswait.site" OR destinationhostname CONTAINS "second.systemupdate.cloud" OR destinationhostname CONTAINS "second.awaitingfor.online" OR destinationhostname CONTAINS "safefor.xyz" OR destinationhostname CONTAINS "readysafe.xyz" OR destinationhostname CONTAINS "instant-update.online" OR destinationhostname CONTAINS "signsafe.xyz" OR destinationhostname CONTAINS "system.updatecheck.store" OR destinationhostname CONTAINS "dataupload.store" OR destinationhostname CONTAINS "safeupload.online" OR destinationhostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "download.datatabletemplate.xyz" OR sourcentdomain CONTAINS "check.datatabletemplate.shop" OR sourcentdomain CONTAINS "download.face-online.world" OR sourcentdomain CONTAINS "root.security-update.xyz" OR sourcentdomain CONTAINS "real-update.xyz" OR sourcentdomain CONTAINS "root.chkstate.online" OR sourcentdomain CONTAINS "secondshop.online" OR sourcentdomain CONTAINS "signsafe.site" OR sourcentdomain CONTAINS "secondshop.store" OR sourcentdomain CONTAINS "botsc.autoupdate.xyz" OR sourcentdomain CONTAINS "first.system-update.xyz" OR sourcentdomain CONTAINS "image-support.xyz" OR sourcentdomain CONTAINS "pre.alwayswait.site" OR sourcentdomain CONTAINS "second.systemupdate.cloud" OR sourcentdomain CONTAINS "second.awaitingfor.online" OR sourcentdomain CONTAINS "safefor.xyz" OR sourcentdomain CONTAINS "readysafe.xyz" OR sourcentdomain CONTAINS "instant-update.online" OR sourcentdomain CONTAINS "signsafe.xyz" OR sourcentdomain CONTAINS "system.updatecheck.store" OR sourcentdomain CONTAINS "dataupload.store" OR sourcentdomain CONTAINS "safeupload.online" OR sourcentdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "download.datatabletemplate.xyz" OR sourcehostname CONTAINS "check.datatabletemplate.shop" OR sourcehostname CONTAINS "download.face-online.world" OR sourcehostname CONTAINS "root.security-update.xyz" OR sourcehostname CONTAINS "real-update.xyz" OR sourcehostname CONTAINS "root.chkstate.online" OR sourcehostname CONTAINS "secondshop.online" OR sourcehostname CONTAINS "signsafe.site" OR sourcehostname CONTAINS "secondshop.store" OR sourcehostname CONTAINS "botsc.autoupdate.xyz" OR sourcehostname CONTAINS "first.system-update.xyz" OR sourcehostname CONTAINS "image-support.xyz" OR sourcehostname CONTAINS "pre.alwayswait.site" OR sourcehostname CONTAINS "second.systemupdate.cloud" OR sourcehostname CONTAINS "second.awaitingfor.online" OR sourcehostname CONTAINS "safefor.xyz" OR sourcehostname CONTAINS "readysafe.xyz" OR sourcehostname CONTAINS "instant-update.online" OR sourcehostname CONTAINS "signsafe.xyz" OR sourcehostname CONTAINS "system.updatecheck.store" OR sourcehostname CONTAINS "dataupload.store" OR sourcehostname CONTAINS "safeupload.online" OR sourcehostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "download.datatabletemplate.xyz" OR destinationntdomain CONTAINS "check.datatabletemplate.shop" OR destinationntdomain CONTAINS "download.face-online.world" OR destinationntdomain CONTAINS "root.security-update.xyz" OR destinationntdomain CONTAINS "real-update.xyz" OR destinationntdomain CONTAINS "root.chkstate.online" OR destinationntdomain CONTAINS "secondshop.online" OR destinationntdomain CONTAINS "signsafe.site" OR destinationntdomain CONTAINS "secondshop.store" OR destinationntdomain CONTAINS "botsc.autoupdate.xyz" OR destinationntdomain CONTAINS "first.system-update.xyz" OR destinationntdomain CONTAINS "image-support.xyz" OR destinationntdomain CONTAINS "pre.alwayswait.site" OR destinationntdomain CONTAINS "second.systemupdate.cloud" OR destinationntdomain CONTAINS "second.awaitingfor.online" OR destinationntdomain CONTAINS "safefor.xyz" OR destinationntdomain CONTAINS "readysafe.xyz" OR destinationntdomain CONTAINS "instant-update.online" OR destinationntdomain CONTAINS "signsafe.xyz" OR destinationntdomain CONTAINS "system.updatecheck.store" OR destinationntdomain CONTAINS "dataupload.store" OR destinationntdomain CONTAINS "safeupload.online" OR destinationntdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "download.datatabletemplate.xyz" OR requesturl CONTAINS "check.datatabletemplate.shop" OR requesturl CONTAINS "download.face-online.world" OR requesturl CONTAINS "root.security-update.xyz" OR requesturl CONTAINS "real-update.xyz" OR requesturl CONTAINS "root.chkstate.online" OR requesturl CONTAINS "secondshop.online" OR requesturl CONTAINS "signsafe.site" OR requesturl CONTAINS "secondshop.store" OR requesturl CONTAINS "botsc.autoupdate.xyz" OR requesturl CONTAINS "first.system-update.xyz" OR requesturl CONTAINS "image-support.xyz" OR requesturl CONTAINS "pre.alwayswait.site" OR requesturl CONTAINS "second.systemupdate.cloud" OR requesturl CONTAINS "second.awaitingfor.online" OR requesturl CONTAINS "safefor.xyz" OR requesturl CONTAINS "readysafe.xyz" OR requesturl CONTAINS "instant-update.online" OR requesturl CONTAINS "signsafe.xyz" OR requesturl CONTAINS "system.updatecheck.store" OR requesturl CONTAINS "dataupload.store" OR requesturl CONTAINS "safeupload.online" OR requesturl CONTAINS "filedrive.online")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "download.datatabletemplate.xyz" OR destinationhostname CONTAINS "check.datatabletemplate.shop" OR destinationhostname CONTAINS "download.face-online.world" OR destinationhostname CONTAINS "root.security-update.xyz" OR destinationhostname CONTAINS "real-update.xyz" OR destinationhostname CONTAINS "root.chkstate.online" OR destinationhostname CONTAINS "secondshop.online" OR destinationhostname CONTAINS "signsafe.site" OR destinationhostname CONTAINS "secondshop.store" OR destinationhostname CONTAINS "botsc.autoupdate.xyz" OR destinationhostname CONTAINS "first.system-update.xyz" OR destinationhostname CONTAINS "image-support.xyz" OR destinationhostname CONTAINS "pre.alwayswait.site" OR destinationhostname CONTAINS "second.systemupdate.cloud" OR destinationhostname CONTAINS "second.awaitingfor.online" OR destinationhostname CONTAINS "safefor.xyz" OR destinationhostname CONTAINS "readysafe.xyz" OR destinationhostname CONTAINS "instant-update.online" OR destinationhostname CONTAINS "signsafe.xyz" OR destinationhostname CONTAINS "system.updatecheck.store" OR destinationhostname CONTAINS "dataupload.store" OR destinationhostname CONTAINS "safeupload.online" OR destinationhostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "download.datatabletemplate.xyz" OR sourcentdomain CONTAINS "check.datatabletemplate.shop" OR sourcentdomain CONTAINS "download.face-online.world" OR sourcentdomain CONTAINS "root.security-update.xyz" OR sourcentdomain CONTAINS "real-update.xyz" OR sourcentdomain CONTAINS "root.chkstate.online" OR sourcentdomain CONTAINS "secondshop.online" OR sourcentdomain CONTAINS "signsafe.site" OR sourcentdomain CONTAINS "secondshop.store" OR sourcentdomain CONTAINS "botsc.autoupdate.xyz" OR sourcentdomain CONTAINS "first.system-update.xyz" OR sourcentdomain CONTAINS "image-support.xyz" OR sourcentdomain CONTAINS "pre.alwayswait.site" OR sourcentdomain CONTAINS "second.systemupdate.cloud" OR sourcentdomain CONTAINS "second.awaitingfor.online" OR sourcentdomain CONTAINS "safefor.xyz" OR sourcentdomain CONTAINS "readysafe.xyz" OR sourcentdomain CONTAINS "instant-update.online" OR sourcentdomain CONTAINS "signsafe.xyz" OR sourcentdomain CONTAINS "system.updatecheck.store" OR sourcentdomain CONTAINS "dataupload.store" OR sourcentdomain CONTAINS "safeupload.online" OR sourcentdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "download.datatabletemplate.xyz" OR sourcehostname CONTAINS "check.datatabletemplate.shop" OR sourcehostname CONTAINS "download.face-online.world" OR sourcehostname CONTAINS "root.security-update.xyz" OR sourcehostname CONTAINS "real-update.xyz" OR sourcehostname CONTAINS "root.chkstate.online" OR sourcehostname CONTAINS "secondshop.online" OR sourcehostname CONTAINS "signsafe.site" OR sourcehostname CONTAINS "secondshop.store" OR sourcehostname CONTAINS "botsc.autoupdate.xyz" OR sourcehostname CONTAINS "first.system-update.xyz" OR sourcehostname CONTAINS "image-support.xyz" OR sourcehostname CONTAINS "pre.alwayswait.site" OR sourcehostname CONTAINS "second.systemupdate.cloud" OR sourcehostname CONTAINS "second.awaitingfor.online" OR sourcehostname CONTAINS "safefor.xyz" OR sourcehostname CONTAINS "readysafe.xyz" OR sourcehostname CONTAINS "instant-update.online" OR sourcehostname CONTAINS "signsafe.xyz" OR sourcehostname CONTAINS "system.updatecheck.store" OR sourcehostname CONTAINS "dataupload.store" OR sourcehostname CONTAINS "safeupload.online" OR sourcehostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "download.datatabletemplate.xyz" OR destinationntdomain CONTAINS "check.datatabletemplate.shop" OR destinationntdomain CONTAINS "download.face-online.world" OR destinationntdomain CONTAINS "root.security-update.xyz" OR destinationntdomain CONTAINS "real-update.xyz" OR destinationntdomain CONTAINS "root.chkstate.online" OR destinationntdomain CONTAINS "secondshop.online" OR destinationntdomain CONTAINS "signsafe.site" OR destinationntdomain CONTAINS "secondshop.store" OR destinationntdomain CONTAINS "botsc.autoupdate.xyz" OR destinationntdomain CONTAINS "first.system-update.xyz" OR destinationntdomain CONTAINS "image-support.xyz" OR destinationntdomain CONTAINS "pre.alwayswait.site" OR destinationntdomain CONTAINS "second.systemupdate.cloud" OR destinationntdomain CONTAINS "second.awaitingfor.online" OR destinationntdomain CONTAINS "safefor.xyz" OR destinationntdomain CONTAINS "readysafe.xyz" OR destinationntdomain CONTAINS "instant-update.online" OR destinationntdomain CONTAINS "signsafe.xyz" OR destinationntdomain CONTAINS "system.updatecheck.store" OR destinationntdomain CONTAINS "dataupload.store" OR destinationntdomain CONTAINS "safeupload.online" OR destinationntdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "download.datatabletemplate.xyz" OR requesturl CONTAINS "check.datatabletemplate.shop" OR requesturl CONTAINS "download.face-online.world" OR requesturl CONTAINS "root.security-update.xyz" OR requesturl CONTAINS "real-update.xyz" OR requesturl CONTAINS "root.chkstate.online" OR requesturl CONTAINS "secondshop.online" OR requesturl CONTAINS "signsafe.site" OR requesturl CONTAINS "secondshop.store" OR requesturl CONTAINS "botsc.autoupdate.xyz" OR requesturl CONTAINS "first.system-update.xyz" OR requesturl CONTAINS "image-support.xyz" OR requesturl CONTAINS "pre.alwayswait.site" OR requesturl CONTAINS "second.systemupdate.cloud" OR requesturl CONTAINS "second.awaitingfor.online" OR requesturl CONTAINS "safefor.xyz" OR requesturl CONTAINS "readysafe.xyz" OR requesturl CONTAINS "instant-update.online" OR requesturl CONTAINS "signsafe.xyz" OR requesturl CONTAINS "system.updatecheck.store" OR requesturl CONTAINS "dataupload.store" OR requesturl CONTAINS "safeupload.online" OR requesturl CONTAINS "filedrive.online")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "download.datatabletemplate.xyz" OR destinationhostname CONTAINS "check.datatabletemplate.shop" OR destinationhostname CONTAINS "download.face-online.world" OR destinationhostname CONTAINS "root.security-update.xyz" OR destinationhostname CONTAINS "real-update.xyz" OR destinationhostname CONTAINS "root.chkstate.online" OR destinationhostname CONTAINS "secondshop.online" OR destinationhostname CONTAINS "signsafe.site" OR destinationhostname CONTAINS "secondshop.store" OR destinationhostname CONTAINS "botsc.autoupdate.xyz" OR destinationhostname CONTAINS "first.system-update.xyz" OR destinationhostname CONTAINS "image-support.xyz" OR destinationhostname CONTAINS "pre.alwayswait.site" OR destinationhostname CONTAINS "second.systemupdate.cloud" OR destinationhostname CONTAINS "second.awaitingfor.online" OR destinationhostname CONTAINS "safefor.xyz" OR destinationhostname CONTAINS "readysafe.xyz" OR destinationhostname CONTAINS "instant-update.online" OR destinationhostname CONTAINS "signsafe.xyz" OR destinationhostname CONTAINS "system.updatecheck.store" OR destinationhostname CONTAINS "dataupload.store" OR destinationhostname CONTAINS "safeupload.online" OR destinationhostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "download.datatabletemplate.xyz" OR sourcentdomain CONTAINS "check.datatabletemplate.shop" OR sourcentdomain CONTAINS "download.face-online.world" OR sourcentdomain CONTAINS "root.security-update.xyz" OR sourcentdomain CONTAINS "real-update.xyz" OR sourcentdomain CONTAINS "root.chkstate.online" OR sourcentdomain CONTAINS "secondshop.online" OR sourcentdomain CONTAINS "signsafe.site" OR sourcentdomain CONTAINS "secondshop.store" OR sourcentdomain CONTAINS "botsc.autoupdate.xyz" OR sourcentdomain CONTAINS "first.system-update.xyz" OR sourcentdomain CONTAINS "image-support.xyz" OR sourcentdomain CONTAINS "pre.alwayswait.site" OR sourcentdomain CONTAINS "second.systemupdate.cloud" OR sourcentdomain CONTAINS "second.awaitingfor.online" OR sourcentdomain CONTAINS "safefor.xyz" OR sourcentdomain CONTAINS "readysafe.xyz" OR sourcentdomain CONTAINS "instant-update.online" OR sourcentdomain CONTAINS "signsafe.xyz" OR sourcentdomain CONTAINS "system.updatecheck.store" OR sourcentdomain CONTAINS "dataupload.store" OR sourcentdomain CONTAINS "safeupload.online" OR sourcentdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "download.datatabletemplate.xyz" OR sourcehostname CONTAINS "check.datatabletemplate.shop" OR sourcehostname CONTAINS "download.face-online.world" OR sourcehostname CONTAINS "root.security-update.xyz" OR sourcehostname CONTAINS "real-update.xyz" OR sourcehostname CONTAINS "root.chkstate.online" OR sourcehostname CONTAINS "secondshop.online" OR sourcehostname CONTAINS "signsafe.site" OR sourcehostname CONTAINS "secondshop.store" OR sourcehostname CONTAINS "botsc.autoupdate.xyz" OR sourcehostname CONTAINS "first.system-update.xyz" OR sourcehostname CONTAINS "image-support.xyz" OR sourcehostname CONTAINS "pre.alwayswait.site" OR sourcehostname CONTAINS "second.systemupdate.cloud" OR sourcehostname CONTAINS "second.awaitingfor.online" OR sourcehostname CONTAINS "safefor.xyz" OR sourcehostname CONTAINS "readysafe.xyz" OR sourcehostname CONTAINS "instant-update.online" OR sourcehostname CONTAINS "signsafe.xyz" OR sourcehostname CONTAINS "system.updatecheck.store" OR sourcehostname CONTAINS "dataupload.store" OR sourcehostname CONTAINS "safeupload.online" OR sourcehostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "download.datatabletemplate.xyz" OR destinationntdomain CONTAINS "check.datatabletemplate.shop" OR destinationntdomain CONTAINS "download.face-online.world" OR destinationntdomain CONTAINS "root.security-update.xyz" OR destinationntdomain CONTAINS "real-update.xyz" OR destinationntdomain CONTAINS "root.chkstate.online" OR destinationntdomain CONTAINS "secondshop.online" OR destinationntdomain CONTAINS "signsafe.site" OR destinationntdomain CONTAINS "secondshop.store" OR destinationntdomain CONTAINS "botsc.autoupdate.xyz" OR destinationntdomain CONTAINS "first.system-update.xyz" OR destinationntdomain CONTAINS "image-support.xyz" OR destinationntdomain CONTAINS "pre.alwayswait.site" OR destinationntdomain CONTAINS "second.systemupdate.cloud" OR destinationntdomain CONTAINS "second.awaitingfor.online" OR destinationntdomain CONTAINS "safefor.xyz" OR destinationntdomain CONTAINS "readysafe.xyz" OR destinationntdomain CONTAINS "instant-update.online" OR destinationntdomain CONTAINS "signsafe.xyz" OR destinationntdomain CONTAINS "system.updatecheck.store" OR destinationntdomain CONTAINS "dataupload.store" OR destinationntdomain CONTAINS "safeupload.online" OR destinationntdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "download.datatabletemplate.xyz" OR requesturl CONTAINS "check.datatabletemplate.shop" OR requesturl CONTAINS "download.face-online.world" OR requesturl CONTAINS "root.security-update.xyz" OR requesturl CONTAINS "real-update.xyz" OR requesturl CONTAINS "root.chkstate.online" OR requesturl CONTAINS "secondshop.online" OR requesturl CONTAINS "signsafe.site" OR requesturl CONTAINS "secondshop.store" OR requesturl CONTAINS "botsc.autoupdate.xyz" OR requesturl CONTAINS "first.system-update.xyz" OR requesturl CONTAINS "image-support.xyz" OR requesturl CONTAINS "pre.alwayswait.site" OR requesturl CONTAINS "second.systemupdate.cloud" OR requesturl CONTAINS "second.awaitingfor.online" OR requesturl CONTAINS "safefor.xyz" OR requesturl CONTAINS "readysafe.xyz" OR requesturl CONTAINS "instant-update.online" OR requesturl CONTAINS "signsafe.xyz" OR requesturl CONTAINS "system.updatecheck.store" OR requesturl CONTAINS "dataupload.store" OR requesturl CONTAINS "safeupload.online" OR requesturl CONTAINS "filedrive.online")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "download.datatabletemplate.xyz" OR destinationhostname CONTAINS "check.datatabletemplate.shop" OR destinationhostname CONTAINS "download.face-online.world" OR destinationhostname CONTAINS "root.security-update.xyz" OR destinationhostname CONTAINS "real-update.xyz" OR destinationhostname CONTAINS "root.chkstate.online" OR destinationhostname CONTAINS "secondshop.online" OR destinationhostname CONTAINS "signsafe.site" OR destinationhostname CONTAINS "secondshop.store" OR destinationhostname CONTAINS "botsc.autoupdate.xyz" OR destinationhostname CONTAINS "first.system-update.xyz" OR destinationhostname CONTAINS "image-support.xyz" OR destinationhostname CONTAINS "pre.alwayswait.site" OR destinationhostname CONTAINS "second.systemupdate.cloud" OR destinationhostname CONTAINS "second.awaitingfor.online" OR destinationhostname CONTAINS "safefor.xyz" OR destinationhostname CONTAINS "readysafe.xyz" OR destinationhostname CONTAINS "instant-update.online" OR destinationhostname CONTAINS "signsafe.xyz" OR destinationhostname CONTAINS "system.updatecheck.store" OR destinationhostname CONTAINS "dataupload.store" OR destinationhostname CONTAINS "safeupload.online" OR destinationhostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "download.datatabletemplate.xyz" OR sourcentdomain CONTAINS "check.datatabletemplate.shop" OR sourcentdomain CONTAINS "download.face-online.world" OR sourcentdomain CONTAINS "root.security-update.xyz" OR sourcentdomain CONTAINS "real-update.xyz" OR sourcentdomain CONTAINS "root.chkstate.online" OR sourcentdomain CONTAINS "secondshop.online" OR sourcentdomain CONTAINS "signsafe.site" OR sourcentdomain CONTAINS "secondshop.store" OR sourcentdomain CONTAINS "botsc.autoupdate.xyz" OR sourcentdomain CONTAINS "first.system-update.xyz" OR sourcentdomain CONTAINS "image-support.xyz" OR sourcentdomain CONTAINS "pre.alwayswait.site" OR sourcentdomain CONTAINS "second.systemupdate.cloud" OR sourcentdomain CONTAINS "second.awaitingfor.online" OR sourcentdomain CONTAINS "safefor.xyz" OR sourcentdomain CONTAINS "readysafe.xyz" OR sourcentdomain CONTAINS "instant-update.online" OR sourcentdomain CONTAINS "signsafe.xyz" OR sourcentdomain CONTAINS "system.updatecheck.store" OR sourcentdomain CONTAINS "dataupload.store" OR sourcentdomain CONTAINS "safeupload.online" OR sourcentdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "download.datatabletemplate.xyz" OR sourcehostname CONTAINS "check.datatabletemplate.shop" OR sourcehostname CONTAINS "download.face-online.world" OR sourcehostname CONTAINS "root.security-update.xyz" OR sourcehostname CONTAINS "real-update.xyz" OR sourcehostname CONTAINS "root.chkstate.online" OR sourcehostname CONTAINS "secondshop.online" OR sourcehostname CONTAINS "signsafe.site" OR sourcehostname CONTAINS "secondshop.store" OR sourcehostname CONTAINS "botsc.autoupdate.xyz" OR sourcehostname CONTAINS "first.system-update.xyz" OR sourcehostname CONTAINS "image-support.xyz" OR sourcehostname CONTAINS "pre.alwayswait.site" OR sourcehostname CONTAINS "second.systemupdate.cloud" OR sourcehostname CONTAINS "second.awaitingfor.online" OR sourcehostname CONTAINS "safefor.xyz" OR sourcehostname CONTAINS "readysafe.xyz" OR sourcehostname CONTAINS "instant-update.online" OR sourcehostname CONTAINS "signsafe.xyz" OR sourcehostname CONTAINS "system.updatecheck.store" OR sourcehostname CONTAINS "dataupload.store" OR sourcehostname CONTAINS "safeupload.online" OR sourcehostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "download.datatabletemplate.xyz" OR destinationntdomain CONTAINS "check.datatabletemplate.shop" OR destinationntdomain CONTAINS "download.face-online.world" OR destinationntdomain CONTAINS "root.security-update.xyz" OR destinationntdomain CONTAINS "real-update.xyz" OR destinationntdomain CONTAINS "root.chkstate.online" OR destinationntdomain CONTAINS "secondshop.online" OR destinationntdomain CONTAINS "signsafe.site" OR destinationntdomain CONTAINS "secondshop.store" OR destinationntdomain CONTAINS "botsc.autoupdate.xyz" OR destinationntdomain CONTAINS "first.system-update.xyz" OR destinationntdomain CONTAINS "image-support.xyz" OR destinationntdomain CONTAINS "pre.alwayswait.site" OR destinationntdomain CONTAINS "second.systemupdate.cloud" OR destinationntdomain CONTAINS "second.awaitingfor.online" OR destinationntdomain CONTAINS "safefor.xyz" OR destinationntdomain CONTAINS "readysafe.xyz" OR destinationntdomain CONTAINS "instant-update.online" OR destinationntdomain CONTAINS "signsafe.xyz" OR destinationntdomain CONTAINS "system.updatecheck.store" OR destinationntdomain CONTAINS "dataupload.store" OR destinationntdomain CONTAINS "safeupload.online" OR destinationntdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND (requesturl CONTAINS "download.datatabletemplate.xyz" OR requesturl CONTAINS "check.datatabletemplate.shop" OR requesturl CONTAINS "download.face-online.world" OR requesturl CONTAINS "root.security-update.xyz" OR requesturl CONTAINS "real-update.xyz" OR requesturl CONTAINS "root.chkstate.online" OR requesturl CONTAINS "secondshop.online" OR requesturl CONTAINS "signsafe.site" OR requesturl CONTAINS "secondshop.store" OR requesturl CONTAINS "botsc.autoupdate.xyz" OR requesturl CONTAINS "first.system-update.xyz" OR requesturl CONTAINS "image-support.xyz" OR requesturl CONTAINS "pre.alwayswait.site" OR requesturl CONTAINS "second.systemupdate.cloud" OR requesturl CONTAINS "second.awaitingfor.online" OR requesturl CONTAINS "safefor.xyz" OR requesturl CONTAINS "readysafe.xyz" OR requesturl CONTAINS "instant-update.online" OR requesturl CONTAINS "signsafe.xyz" OR requesturl CONTAINS "system.updatecheck.store" OR requesturl CONTAINS "dataupload.store" OR requesturl CONTAINS "safeupload.online" OR requesturl CONTAINS "filedrive.online")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "download.datatabletemplate.xyz" OR destinationhostname CONTAINS "check.datatabletemplate.shop" OR destinationhostname CONTAINS "download.face-online.world" OR destinationhostname CONTAINS "root.security-update.xyz" OR destinationhostname CONTAINS "real-update.xyz" OR destinationhostname CONTAINS "root.chkstate.online" OR destinationhostname CONTAINS "secondshop.online" OR destinationhostname CONTAINS "signsafe.site" OR destinationhostname CONTAINS "secondshop.store" OR destinationhostname CONTAINS "botsc.autoupdate.xyz" OR destinationhostname CONTAINS "first.system-update.xyz" OR destinationhostname CONTAINS "image-support.xyz" OR destinationhostname CONTAINS "pre.alwayswait.site" OR destinationhostname CONTAINS "second.systemupdate.cloud" OR destinationhostname CONTAINS "second.awaitingfor.online" OR destinationhostname CONTAINS "safefor.xyz" OR destinationhostname CONTAINS "readysafe.xyz" OR destinationhostname CONTAINS "instant-update.online" OR destinationhostname CONTAINS "signsafe.xyz" OR destinationhostname CONTAINS "system.updatecheck.store" OR destinationhostname CONTAINS "dataupload.store" OR destinationhostname CONTAINS "safeupload.online" OR destinationhostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "download.datatabletemplate.xyz" OR sourcentdomain CONTAINS "check.datatabletemplate.shop" OR sourcentdomain CONTAINS "download.face-online.world" OR sourcentdomain CONTAINS "root.security-update.xyz" OR sourcentdomain CONTAINS "real-update.xyz" OR sourcentdomain CONTAINS "root.chkstate.online" OR sourcentdomain CONTAINS "secondshop.online" OR sourcentdomain CONTAINS "signsafe.site" OR sourcentdomain CONTAINS "secondshop.store" OR sourcentdomain CONTAINS "botsc.autoupdate.xyz" OR sourcentdomain CONTAINS "first.system-update.xyz" OR sourcentdomain CONTAINS "image-support.xyz" OR sourcentdomain CONTAINS "pre.alwayswait.site" OR sourcentdomain CONTAINS "second.systemupdate.cloud" OR sourcentdomain CONTAINS "second.awaitingfor.online" OR sourcentdomain CONTAINS "safefor.xyz" OR sourcentdomain CONTAINS "readysafe.xyz" OR sourcentdomain CONTAINS "instant-update.online" OR sourcentdomain CONTAINS "signsafe.xyz" OR sourcentdomain CONTAINS "system.updatecheck.store" OR sourcentdomain CONTAINS "dataupload.store" OR sourcentdomain CONTAINS "safeupload.online" OR sourcentdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "download.datatabletemplate.xyz" OR sourcehostname CONTAINS "check.datatabletemplate.shop" OR sourcehostname CONTAINS "download.face-online.world" OR sourcehostname CONTAINS "root.security-update.xyz" OR sourcehostname CONTAINS "real-update.xyz" OR sourcehostname CONTAINS "root.chkstate.online" OR sourcehostname CONTAINS "secondshop.online" OR sourcehostname CONTAINS "signsafe.site" OR sourcehostname CONTAINS "secondshop.store" OR sourcehostname CONTAINS "botsc.autoupdate.xyz" OR sourcehostname CONTAINS "first.system-update.xyz" OR sourcehostname CONTAINS "image-support.xyz" OR sourcehostname CONTAINS "pre.alwayswait.site" OR sourcehostname CONTAINS "second.systemupdate.cloud" OR sourcehostname CONTAINS "second.awaitingfor.online" OR sourcehostname CONTAINS "safefor.xyz" OR sourcehostname CONTAINS "readysafe.xyz" OR sourcehostname CONTAINS "instant-update.online" OR sourcehostname CONTAINS "signsafe.xyz" OR sourcehostname CONTAINS "system.updatecheck.store" OR sourcehostname CONTAINS "dataupload.store" OR sourcehostname CONTAINS "safeupload.online" OR sourcehostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "download.datatabletemplate.xyz" OR destinationntdomain CONTAINS "check.datatabletemplate.shop" OR destinationntdomain CONTAINS "download.face-online.world" OR destinationntdomain CONTAINS "root.security-update.xyz" OR destinationntdomain CONTAINS "real-update.xyz" OR destinationntdomain CONTAINS "root.chkstate.online" OR destinationntdomain CONTAINS "secondshop.online" OR destinationntdomain CONTAINS "signsafe.site" OR destinationntdomain CONTAINS "secondshop.store" OR destinationntdomain CONTAINS "botsc.autoupdate.xyz" OR destinationntdomain CONTAINS "first.system-update.xyz" OR destinationntdomain CONTAINS "image-support.xyz" OR destinationntdomain CONTAINS "pre.alwayswait.site" OR destinationntdomain CONTAINS "second.systemupdate.cloud" OR destinationntdomain CONTAINS "second.awaitingfor.online" OR destinationntdomain CONTAINS "safefor.xyz" OR destinationntdomain CONTAINS "readysafe.xyz" OR destinationntdomain CONTAINS "instant-update.online" OR destinationntdomain CONTAINS "signsafe.xyz" OR destinationntdomain CONTAINS "system.updatecheck.store" OR destinationntdomain CONTAINS "dataupload.store" OR destinationntdomain CONTAINS "safeupload.online" OR destinationntdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND (requesturl CONTAINS "download.datatabletemplate.xyz" OR requesturl CONTAINS "check.datatabletemplate.shop" OR requesturl CONTAINS "download.face-online.world" OR requesturl CONTAINS "root.security-update.xyz" OR requesturl CONTAINS "real-update.xyz" OR requesturl CONTAINS "root.chkstate.online" OR requesturl CONTAINS "secondshop.online" OR requesturl CONTAINS "signsafe.site" OR requesturl CONTAINS "secondshop.store" OR requesturl CONTAINS "botsc.autoupdate.xyz" OR requesturl CONTAINS "first.system-update.xyz" OR requesturl CONTAINS "image-support.xyz" OR requesturl CONTAINS "pre.alwayswait.site" OR requesturl CONTAINS "second.systemupdate.cloud" OR requesturl CONTAINS "second.awaitingfor.online" OR requesturl CONTAINS "safefor.xyz" OR requesturl CONTAINS "readysafe.xyz" OR requesturl CONTAINS "instant-update.online" OR requesturl CONTAINS "signsafe.xyz" OR requesturl CONTAINS "system.updatecheck.store" OR requesturl CONTAINS "dataupload.store" OR requesturl CONTAINS "safeupload.online" OR requesturl CONTAINS "filedrive.online")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "download.datatabletemplate.xyz" OR destinationhostname CONTAINS "check.datatabletemplate.shop" OR destinationhostname CONTAINS "download.face-online.world" OR destinationhostname CONTAINS "root.security-update.xyz" OR destinationhostname CONTAINS "real-update.xyz" OR destinationhostname CONTAINS "root.chkstate.online" OR destinationhostname CONTAINS "secondshop.online" OR destinationhostname CONTAINS "signsafe.site" OR destinationhostname CONTAINS "secondshop.store" OR destinationhostname CONTAINS "botsc.autoupdate.xyz" OR destinationhostname CONTAINS "first.system-update.xyz" OR destinationhostname CONTAINS "image-support.xyz" OR destinationhostname CONTAINS "pre.alwayswait.site" OR destinationhostname CONTAINS "second.systemupdate.cloud" OR destinationhostname CONTAINS "second.awaitingfor.online" OR destinationhostname CONTAINS "safefor.xyz" OR destinationhostname CONTAINS "readysafe.xyz" OR destinationhostname CONTAINS "instant-update.online" OR destinationhostname CONTAINS "signsafe.xyz" OR destinationhostname CONTAINS "system.updatecheck.store" OR destinationhostname CONTAINS "dataupload.store" OR destinationhostname CONTAINS "safeupload.online" OR destinationhostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "download.datatabletemplate.xyz" OR sourcentdomain CONTAINS "check.datatabletemplate.shop" OR sourcentdomain CONTAINS "download.face-online.world" OR sourcentdomain CONTAINS "root.security-update.xyz" OR sourcentdomain CONTAINS "real-update.xyz" OR sourcentdomain CONTAINS "root.chkstate.online" OR sourcentdomain CONTAINS "secondshop.online" OR sourcentdomain CONTAINS "signsafe.site" OR sourcentdomain CONTAINS "secondshop.store" OR sourcentdomain CONTAINS "botsc.autoupdate.xyz" OR sourcentdomain CONTAINS "first.system-update.xyz" OR sourcentdomain CONTAINS "image-support.xyz" OR sourcentdomain CONTAINS "pre.alwayswait.site" OR sourcentdomain CONTAINS "second.systemupdate.cloud" OR sourcentdomain CONTAINS "second.awaitingfor.online" OR sourcentdomain CONTAINS "safefor.xyz" OR sourcentdomain CONTAINS "readysafe.xyz" OR sourcentdomain CONTAINS "instant-update.online" OR sourcentdomain CONTAINS "signsafe.xyz" OR sourcentdomain CONTAINS "system.updatecheck.store" OR sourcentdomain CONTAINS "dataupload.store" OR sourcentdomain CONTAINS "safeupload.online" OR sourcentdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "download.datatabletemplate.xyz" OR sourcehostname CONTAINS "check.datatabletemplate.shop" OR sourcehostname CONTAINS "download.face-online.world" OR sourcehostname CONTAINS "root.security-update.xyz" OR sourcehostname CONTAINS "real-update.xyz" OR sourcehostname CONTAINS "root.chkstate.online" OR sourcehostname CONTAINS "secondshop.online" OR sourcehostname CONTAINS "signsafe.site" OR sourcehostname CONTAINS "secondshop.store" OR sourcehostname CONTAINS "botsc.autoupdate.xyz" OR sourcehostname CONTAINS "first.system-update.xyz" OR sourcehostname CONTAINS "image-support.xyz" OR sourcehostname CONTAINS "pre.alwayswait.site" OR sourcehostname CONTAINS "second.systemupdate.cloud" OR sourcehostname CONTAINS "second.awaitingfor.online" OR sourcehostname CONTAINS "safefor.xyz" OR sourcehostname CONTAINS "readysafe.xyz" OR sourcehostname CONTAINS "instant-update.online" OR sourcehostname CONTAINS "signsafe.xyz" OR sourcehostname CONTAINS "system.updatecheck.store" OR sourcehostname CONTAINS "dataupload.store" OR sourcehostname CONTAINS "safeupload.online" OR sourcehostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "download.datatabletemplate.xyz" OR destinationntdomain CONTAINS "check.datatabletemplate.shop" OR destinationntdomain CONTAINS "download.face-online.world" OR destinationntdomain CONTAINS "root.security-update.xyz" OR destinationntdomain CONTAINS "real-update.xyz" OR destinationntdomain CONTAINS "root.chkstate.online" OR destinationntdomain CONTAINS "secondshop.online" OR destinationntdomain CONTAINS "signsafe.site" OR destinationntdomain CONTAINS "secondshop.store" OR destinationntdomain CONTAINS "botsc.autoupdate.xyz" OR destinationntdomain CONTAINS "first.system-update.xyz" OR destinationntdomain CONTAINS "image-support.xyz" OR destinationntdomain CONTAINS "pre.alwayswait.site" OR destinationntdomain CONTAINS "second.systemupdate.cloud" OR destinationntdomain CONTAINS "second.awaitingfor.online" OR destinationntdomain CONTAINS "safefor.xyz" OR destinationntdomain CONTAINS "readysafe.xyz" OR destinationntdomain CONTAINS "instant-update.online" OR destinationntdomain CONTAINS "signsafe.xyz" OR destinationntdomain CONTAINS "system.updatecheck.store" OR destinationntdomain CONTAINS "dataupload.store" OR destinationntdomain CONTAINS "safeupload.online" OR destinationntdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND (requesturl CONTAINS "download.datatabletemplate.xyz" OR requesturl CONTAINS "check.datatabletemplate.shop" OR requesturl CONTAINS "download.face-online.world" OR requesturl CONTAINS "root.security-update.xyz" OR requesturl CONTAINS "real-update.xyz" OR requesturl CONTAINS "root.chkstate.online" OR requesturl CONTAINS "secondshop.online" OR requesturl CONTAINS "signsafe.site" OR requesturl CONTAINS "secondshop.store" OR requesturl CONTAINS "botsc.autoupdate.xyz" OR requesturl CONTAINS "first.system-update.xyz" OR requesturl CONTAINS "image-support.xyz" OR requesturl CONTAINS "pre.alwayswait.site" OR requesturl CONTAINS "second.systemupdate.cloud" OR requesturl CONTAINS "second.awaitingfor.online" OR requesturl CONTAINS "safefor.xyz" OR requesturl CONTAINS "readysafe.xyz" OR requesturl CONTAINS "instant-update.online" OR requesturl CONTAINS "signsafe.xyz" OR requesturl CONTAINS "system.updatecheck.store" OR requesturl CONTAINS "dataupload.store" OR requesturl CONTAINS "safeupload.online" OR requesturl CONTAINS "filedrive.online")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "download.datatabletemplate.xyz" OR destinationhostname CONTAINS "check.datatabletemplate.shop" OR destinationhostname CONTAINS "download.face-online.world" OR destinationhostname CONTAINS "root.security-update.xyz" OR destinationhostname CONTAINS "real-update.xyz" OR destinationhostname CONTAINS "root.chkstate.online" OR destinationhostname CONTAINS "secondshop.online" OR destinationhostname CONTAINS "signsafe.site" OR destinationhostname CONTAINS "secondshop.store" OR destinationhostname CONTAINS "botsc.autoupdate.xyz" OR destinationhostname CONTAINS "first.system-update.xyz" OR destinationhostname CONTAINS "image-support.xyz" OR destinationhostname CONTAINS "pre.alwayswait.site" OR destinationhostname CONTAINS "second.systemupdate.cloud" OR destinationhostname CONTAINS "second.awaitingfor.online" OR destinationhostname CONTAINS "safefor.xyz" OR destinationhostname CONTAINS "readysafe.xyz" OR destinationhostname CONTAINS "instant-update.online" OR destinationhostname CONTAINS "signsafe.xyz" OR destinationhostname CONTAINS "system.updatecheck.store" OR destinationhostname CONTAINS "dataupload.store" OR destinationhostname CONTAINS "safeupload.online" OR destinationhostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "download.datatabletemplate.xyz" OR sourcentdomain CONTAINS "check.datatabletemplate.shop" OR sourcentdomain CONTAINS "download.face-online.world" OR sourcentdomain CONTAINS "root.security-update.xyz" OR sourcentdomain CONTAINS "real-update.xyz" OR sourcentdomain CONTAINS "root.chkstate.online" OR sourcentdomain CONTAINS "secondshop.online" OR sourcentdomain CONTAINS "signsafe.site" OR sourcentdomain CONTAINS "secondshop.store" OR sourcentdomain CONTAINS "botsc.autoupdate.xyz" OR sourcentdomain CONTAINS "first.system-update.xyz" OR sourcentdomain CONTAINS "image-support.xyz" OR sourcentdomain CONTAINS "pre.alwayswait.site" OR sourcentdomain CONTAINS "second.systemupdate.cloud" OR sourcentdomain CONTAINS "second.awaitingfor.online" OR sourcentdomain CONTAINS "safefor.xyz" OR sourcentdomain CONTAINS "readysafe.xyz" OR sourcentdomain CONTAINS "instant-update.online" OR sourcentdomain CONTAINS "signsafe.xyz" OR sourcentdomain CONTAINS "system.updatecheck.store" OR sourcentdomain CONTAINS "dataupload.store" OR sourcentdomain CONTAINS "safeupload.online" OR sourcentdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "download.datatabletemplate.xyz" OR sourcehostname CONTAINS "check.datatabletemplate.shop" OR sourcehostname CONTAINS "download.face-online.world" OR sourcehostname CONTAINS "root.security-update.xyz" OR sourcehostname CONTAINS "real-update.xyz" OR sourcehostname CONTAINS "root.chkstate.online" OR sourcehostname CONTAINS "secondshop.online" OR sourcehostname CONTAINS "signsafe.site" OR sourcehostname CONTAINS "secondshop.store" OR sourcehostname CONTAINS "botsc.autoupdate.xyz" OR sourcehostname CONTAINS "first.system-update.xyz" OR sourcehostname CONTAINS "image-support.xyz" OR sourcehostname CONTAINS "pre.alwayswait.site" OR sourcehostname CONTAINS "second.systemupdate.cloud" OR sourcehostname CONTAINS "second.awaitingfor.online" OR sourcehostname CONTAINS "safefor.xyz" OR sourcehostname CONTAINS "readysafe.xyz" OR sourcehostname CONTAINS "instant-update.online" OR sourcehostname CONTAINS "signsafe.xyz" OR sourcehostname CONTAINS "system.updatecheck.store" OR sourcehostname CONTAINS "dataupload.store" OR sourcehostname CONTAINS "safeupload.online" OR sourcehostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "download.datatabletemplate.xyz" OR destinationntdomain CONTAINS "check.datatabletemplate.shop" OR destinationntdomain CONTAINS "download.face-online.world" OR destinationntdomain CONTAINS "root.security-update.xyz" OR destinationntdomain CONTAINS "real-update.xyz" OR destinationntdomain CONTAINS "root.chkstate.online" OR destinationntdomain CONTAINS "secondshop.online" OR destinationntdomain CONTAINS "signsafe.site" OR destinationntdomain CONTAINS "secondshop.store" OR destinationntdomain CONTAINS "botsc.autoupdate.xyz" OR destinationntdomain CONTAINS "first.system-update.xyz" OR destinationntdomain CONTAINS "image-support.xyz" OR destinationntdomain CONTAINS "pre.alwayswait.site" OR destinationntdomain CONTAINS "second.systemupdate.cloud" OR destinationntdomain CONTAINS "second.awaitingfor.online" OR destinationntdomain CONTAINS "safefor.xyz" OR destinationntdomain CONTAINS "readysafe.xyz" OR destinationntdomain CONTAINS "instant-update.online" OR destinationntdomain CONTAINS "signsafe.xyz" OR destinationntdomain CONTAINS "system.updatecheck.store" OR destinationntdomain CONTAINS "dataupload.store" OR destinationntdomain CONTAINS "safeupload.online" OR destinationntdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "download.datatabletemplate.xyz" OR requesturl CONTAINS "check.datatabletemplate.shop" OR requesturl CONTAINS "download.face-online.world" OR requesturl CONTAINS "root.security-update.xyz" OR requesturl CONTAINS "real-update.xyz" OR requesturl CONTAINS "root.chkstate.online" OR requesturl CONTAINS "secondshop.online" OR requesturl CONTAINS "signsafe.site" OR requesturl CONTAINS "secondshop.store" OR requesturl CONTAINS "botsc.autoupdate.xyz" OR requesturl CONTAINS "first.system-update.xyz" OR requesturl CONTAINS "image-support.xyz" OR requesturl CONTAINS "pre.alwayswait.site" OR requesturl CONTAINS "second.systemupdate.cloud" OR requesturl CONTAINS "second.awaitingfor.online" OR requesturl CONTAINS "safefor.xyz" OR requesturl CONTAINS "readysafe.xyz" OR requesturl CONTAINS "instant-update.online" OR requesturl CONTAINS "signsafe.xyz" OR requesturl CONTAINS "system.updatecheck.store" OR requesturl CONTAINS "dataupload.store" OR requesturl CONTAINS "safeupload.online" OR requesturl CONTAINS "filedrive.online")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "download.datatabletemplate.xyz" OR destinationhostname CONTAINS "check.datatabletemplate.shop" OR destinationhostname CONTAINS "download.face-online.world" OR destinationhostname CONTAINS "root.security-update.xyz" OR destinationhostname CONTAINS "real-update.xyz" OR destinationhostname CONTAINS "root.chkstate.online" OR destinationhostname CONTAINS "secondshop.online" OR destinationhostname CONTAINS "signsafe.site" OR destinationhostname CONTAINS "secondshop.store" OR destinationhostname CONTAINS "botsc.autoupdate.xyz" OR destinationhostname CONTAINS "first.system-update.xyz" OR destinationhostname CONTAINS "image-support.xyz" OR destinationhostname CONTAINS "pre.alwayswait.site" OR destinationhostname CONTAINS "second.systemupdate.cloud" OR destinationhostname CONTAINS "second.awaitingfor.online" OR destinationhostname CONTAINS "safefor.xyz" OR destinationhostname CONTAINS "readysafe.xyz" OR destinationhostname CONTAINS "instant-update.online" OR destinationhostname CONTAINS "signsafe.xyz" OR destinationhostname CONTAINS "system.updatecheck.store" OR destinationhostname CONTAINS "dataupload.store" OR destinationhostname CONTAINS "safeupload.online" OR destinationhostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "download.datatabletemplate.xyz" OR sourcentdomain CONTAINS "check.datatabletemplate.shop" OR sourcentdomain CONTAINS "download.face-online.world" OR sourcentdomain CONTAINS "root.security-update.xyz" OR sourcentdomain CONTAINS "real-update.xyz" OR sourcentdomain CONTAINS "root.chkstate.online" OR sourcentdomain CONTAINS "secondshop.online" OR sourcentdomain CONTAINS "signsafe.site" OR sourcentdomain CONTAINS "secondshop.store" OR sourcentdomain CONTAINS "botsc.autoupdate.xyz" OR sourcentdomain CONTAINS "first.system-update.xyz" OR sourcentdomain CONTAINS "image-support.xyz" OR sourcentdomain CONTAINS "pre.alwayswait.site" OR sourcentdomain CONTAINS "second.systemupdate.cloud" OR sourcentdomain CONTAINS "second.awaitingfor.online" OR sourcentdomain CONTAINS "safefor.xyz" OR sourcentdomain CONTAINS "readysafe.xyz" OR sourcentdomain CONTAINS "instant-update.online" OR sourcentdomain CONTAINS "signsafe.xyz" OR sourcentdomain CONTAINS "system.updatecheck.store" OR sourcentdomain CONTAINS "dataupload.store" OR sourcentdomain CONTAINS "safeupload.online" OR sourcentdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "download.datatabletemplate.xyz" OR sourcehostname CONTAINS "check.datatabletemplate.shop" OR sourcehostname CONTAINS "download.face-online.world" OR sourcehostname CONTAINS "root.security-update.xyz" OR sourcehostname CONTAINS "real-update.xyz" OR sourcehostname CONTAINS "root.chkstate.online" OR sourcehostname CONTAINS "secondshop.online" OR sourcehostname CONTAINS "signsafe.site" OR sourcehostname CONTAINS "secondshop.store" OR sourcehostname CONTAINS "botsc.autoupdate.xyz" OR sourcehostname CONTAINS "first.system-update.xyz" OR sourcehostname CONTAINS "image-support.xyz" OR sourcehostname CONTAINS "pre.alwayswait.site" OR sourcehostname CONTAINS "second.systemupdate.cloud" OR sourcehostname CONTAINS "second.awaitingfor.online" OR sourcehostname CONTAINS "safefor.xyz" OR sourcehostname CONTAINS "readysafe.xyz" OR sourcehostname CONTAINS "instant-update.online" OR sourcehostname CONTAINS "signsafe.xyz" OR sourcehostname CONTAINS "system.updatecheck.store" OR sourcehostname CONTAINS "dataupload.store" OR sourcehostname CONTAINS "safeupload.online" OR sourcehostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "download.datatabletemplate.xyz" OR destinationntdomain CONTAINS "check.datatabletemplate.shop" OR destinationntdomain CONTAINS "download.face-online.world" OR destinationntdomain CONTAINS "root.security-update.xyz" OR destinationntdomain CONTAINS "real-update.xyz" OR destinationntdomain CONTAINS "root.chkstate.online" OR destinationntdomain CONTAINS "secondshop.online" OR destinationntdomain CONTAINS "signsafe.site" OR destinationntdomain CONTAINS "secondshop.store" OR destinationntdomain CONTAINS "botsc.autoupdate.xyz" OR destinationntdomain CONTAINS "first.system-update.xyz" OR destinationntdomain CONTAINS "image-support.xyz" OR destinationntdomain CONTAINS "pre.alwayswait.site" OR destinationntdomain CONTAINS "second.systemupdate.cloud" OR destinationntdomain CONTAINS "second.awaitingfor.online" OR destinationntdomain CONTAINS "safefor.xyz" OR destinationntdomain CONTAINS "readysafe.xyz" OR destinationntdomain CONTAINS "instant-update.online" OR destinationntdomain CONTAINS "signsafe.xyz" OR destinationntdomain CONTAINS "system.updatecheck.store" OR destinationntdomain CONTAINS "dataupload.store" OR destinationntdomain CONTAINS "safeupload.online" OR destinationntdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND (requesturl CONTAINS "download.datatabletemplate.xyz" OR requesturl CONTAINS "check.datatabletemplate.shop" OR requesturl CONTAINS "download.face-online.world" OR requesturl CONTAINS "root.security-update.xyz" OR requesturl CONTAINS "real-update.xyz" OR requesturl CONTAINS "root.chkstate.online" OR requesturl CONTAINS "secondshop.online" OR requesturl CONTAINS "signsafe.site" OR requesturl CONTAINS "secondshop.store" OR requesturl CONTAINS "botsc.autoupdate.xyz" OR requesturl CONTAINS "first.system-update.xyz" OR requesturl CONTAINS "image-support.xyz" OR requesturl CONTAINS "pre.alwayswait.site" OR requesturl CONTAINS "second.systemupdate.cloud" OR requesturl CONTAINS "second.awaitingfor.online" OR requesturl CONTAINS "safefor.xyz" OR requesturl CONTAINS "readysafe.xyz" OR requesturl CONTAINS "instant-update.online" OR requesturl CONTAINS "signsafe.xyz" OR requesturl CONTAINS "system.updatecheck.store" OR requesturl CONTAINS "dataupload.store" OR requesturl CONTAINS "safeupload.online" OR requesturl CONTAINS "filedrive.online")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "download.datatabletemplate.xyz" OR destinationhostname CONTAINS "check.datatabletemplate.shop" OR destinationhostname CONTAINS "download.face-online.world" OR destinationhostname CONTAINS "root.security-update.xyz" OR destinationhostname CONTAINS "real-update.xyz" OR destinationhostname CONTAINS "root.chkstate.online" OR destinationhostname CONTAINS "secondshop.online" OR destinationhostname CONTAINS "signsafe.site" OR destinationhostname CONTAINS "secondshop.store" OR destinationhostname CONTAINS "botsc.autoupdate.xyz" OR destinationhostname CONTAINS "first.system-update.xyz" OR destinationhostname CONTAINS "image-support.xyz" OR destinationhostname CONTAINS "pre.alwayswait.site" OR destinationhostname CONTAINS "second.systemupdate.cloud" OR destinationhostname CONTAINS "second.awaitingfor.online" OR destinationhostname CONTAINS "safefor.xyz" OR destinationhostname CONTAINS "readysafe.xyz" OR destinationhostname CONTAINS "instant-update.online" OR destinationhostname CONTAINS "signsafe.xyz" OR destinationhostname CONTAINS "system.updatecheck.store" OR destinationhostname CONTAINS "dataupload.store" OR destinationhostname CONTAINS "safeupload.online" OR destinationhostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "download.datatabletemplate.xyz" OR sourcentdomain CONTAINS "check.datatabletemplate.shop" OR sourcentdomain CONTAINS "download.face-online.world" OR sourcentdomain CONTAINS "root.security-update.xyz" OR sourcentdomain CONTAINS "real-update.xyz" OR sourcentdomain CONTAINS "root.chkstate.online" OR sourcentdomain CONTAINS "secondshop.online" OR sourcentdomain CONTAINS "signsafe.site" OR sourcentdomain CONTAINS "secondshop.store" OR sourcentdomain CONTAINS "botsc.autoupdate.xyz" OR sourcentdomain CONTAINS "first.system-update.xyz" OR sourcentdomain CONTAINS "image-support.xyz" OR sourcentdomain CONTAINS "pre.alwayswait.site" OR sourcentdomain CONTAINS "second.systemupdate.cloud" OR sourcentdomain CONTAINS "second.awaitingfor.online" OR sourcentdomain CONTAINS "safefor.xyz" OR sourcentdomain CONTAINS "readysafe.xyz" OR sourcentdomain CONTAINS "instant-update.online" OR sourcentdomain CONTAINS "signsafe.xyz" OR sourcentdomain CONTAINS "system.updatecheck.store" OR sourcentdomain CONTAINS "dataupload.store" OR sourcentdomain CONTAINS "safeupload.online" OR sourcentdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "download.datatabletemplate.xyz" OR sourcehostname CONTAINS "check.datatabletemplate.shop" OR sourcehostname CONTAINS "download.face-online.world" OR sourcehostname CONTAINS "root.security-update.xyz" OR sourcehostname CONTAINS "real-update.xyz" OR sourcehostname CONTAINS "root.chkstate.online" OR sourcehostname CONTAINS "secondshop.online" OR sourcehostname CONTAINS "signsafe.site" OR sourcehostname CONTAINS "secondshop.store" OR sourcehostname CONTAINS "botsc.autoupdate.xyz" OR sourcehostname CONTAINS "first.system-update.xyz" OR sourcehostname CONTAINS "image-support.xyz" OR sourcehostname CONTAINS "pre.alwayswait.site" OR sourcehostname CONTAINS "second.systemupdate.cloud" OR sourcehostname CONTAINS "second.awaitingfor.online" OR sourcehostname CONTAINS "safefor.xyz" OR sourcehostname CONTAINS "readysafe.xyz" OR sourcehostname CONTAINS "instant-update.online" OR sourcehostname CONTAINS "signsafe.xyz" OR sourcehostname CONTAINS "system.updatecheck.store" OR sourcehostname CONTAINS "dataupload.store" OR sourcehostname CONTAINS "safeupload.online" OR sourcehostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "download.datatabletemplate.xyz" OR destinationntdomain CONTAINS "check.datatabletemplate.shop" OR destinationntdomain CONTAINS "download.face-online.world" OR destinationntdomain CONTAINS "root.security-update.xyz" OR destinationntdomain CONTAINS "real-update.xyz" OR destinationntdomain CONTAINS "root.chkstate.online" OR destinationntdomain CONTAINS "secondshop.online" OR destinationntdomain CONTAINS "signsafe.site" OR destinationntdomain CONTAINS "secondshop.store" OR destinationntdomain CONTAINS "botsc.autoupdate.xyz" OR destinationntdomain CONTAINS "first.system-update.xyz" OR destinationntdomain CONTAINS "image-support.xyz" OR destinationntdomain CONTAINS "pre.alwayswait.site" OR destinationntdomain CONTAINS "second.systemupdate.cloud" OR destinationntdomain CONTAINS "second.awaitingfor.online" OR destinationntdomain CONTAINS "safefor.xyz" OR destinationntdomain CONTAINS "readysafe.xyz" OR destinationntdomain CONTAINS "instant-update.online" OR destinationntdomain CONTAINS "signsafe.xyz" OR destinationntdomain CONTAINS "system.updatecheck.store" OR destinationntdomain CONTAINS "dataupload.store" OR destinationntdomain CONTAINS "safeupload.online" OR destinationntdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "download.datatabletemplate.xyz" OR requesturl CONTAINS "check.datatabletemplate.shop" OR requesturl CONTAINS "download.face-online.world" OR requesturl CONTAINS "root.security-update.xyz" OR requesturl CONTAINS "real-update.xyz" OR requesturl CONTAINS "root.chkstate.online" OR requesturl CONTAINS "secondshop.online" OR requesturl CONTAINS "signsafe.site" OR requesturl CONTAINS "secondshop.store" OR requesturl CONTAINS "botsc.autoupdate.xyz" OR requesturl CONTAINS "first.system-update.xyz" OR requesturl CONTAINS "image-support.xyz" OR requesturl CONTAINS "pre.alwayswait.site" OR requesturl CONTAINS "second.systemupdate.cloud" OR requesturl CONTAINS "second.awaitingfor.online" OR requesturl CONTAINS "safefor.xyz" OR requesturl CONTAINS "readysafe.xyz" OR requesturl CONTAINS "instant-update.online" OR requesturl CONTAINS "signsafe.xyz" OR requesturl CONTAINS "system.updatecheck.store" OR requesturl CONTAINS "dataupload.store" OR requesturl CONTAINS "safeupload.online" OR requesturl CONTAINS "filedrive.online")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "download.datatabletemplate.xyz" OR destinationhostname CONTAINS "check.datatabletemplate.shop" OR destinationhostname CONTAINS "download.face-online.world" OR destinationhostname CONTAINS "root.security-update.xyz" OR destinationhostname CONTAINS "real-update.xyz" OR destinationhostname CONTAINS "root.chkstate.online" OR destinationhostname CONTAINS "secondshop.online" OR destinationhostname CONTAINS "signsafe.site" OR destinationhostname CONTAINS "secondshop.store" OR destinationhostname CONTAINS "botsc.autoupdate.xyz" OR destinationhostname CONTAINS "first.system-update.xyz" OR destinationhostname CONTAINS "image-support.xyz" OR destinationhostname CONTAINS "pre.alwayswait.site" OR destinationhostname CONTAINS "second.systemupdate.cloud" OR destinationhostname CONTAINS "second.awaitingfor.online" OR destinationhostname CONTAINS "safefor.xyz" OR destinationhostname CONTAINS "readysafe.xyz" OR destinationhostname CONTAINS "instant-update.online" OR destinationhostname CONTAINS "signsafe.xyz" OR destinationhostname CONTAINS "system.updatecheck.store" OR destinationhostname CONTAINS "dataupload.store" OR destinationhostname CONTAINS "safeupload.online" OR destinationhostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "download.datatabletemplate.xyz" OR sourcentdomain CONTAINS "check.datatabletemplate.shop" OR sourcentdomain CONTAINS "download.face-online.world" OR sourcentdomain CONTAINS "root.security-update.xyz" OR sourcentdomain CONTAINS "real-update.xyz" OR sourcentdomain CONTAINS "root.chkstate.online" OR sourcentdomain CONTAINS "secondshop.online" OR sourcentdomain CONTAINS "signsafe.site" OR sourcentdomain CONTAINS "secondshop.store" OR sourcentdomain CONTAINS "botsc.autoupdate.xyz" OR sourcentdomain CONTAINS "first.system-update.xyz" OR sourcentdomain CONTAINS "image-support.xyz" OR sourcentdomain CONTAINS "pre.alwayswait.site" OR sourcentdomain CONTAINS "second.systemupdate.cloud" OR sourcentdomain CONTAINS "second.awaitingfor.online" OR sourcentdomain CONTAINS "safefor.xyz" OR sourcentdomain CONTAINS "readysafe.xyz" OR sourcentdomain CONTAINS "instant-update.online" OR sourcentdomain CONTAINS "signsafe.xyz" OR sourcentdomain CONTAINS "system.updatecheck.store" OR sourcentdomain CONTAINS "dataupload.store" OR sourcentdomain CONTAINS "safeupload.online" OR sourcentdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "download.datatabletemplate.xyz" OR sourcehostname CONTAINS "check.datatabletemplate.shop" OR sourcehostname CONTAINS "download.face-online.world" OR sourcehostname CONTAINS "root.security-update.xyz" OR sourcehostname CONTAINS "real-update.xyz" OR sourcehostname CONTAINS "root.chkstate.online" OR sourcehostname CONTAINS "secondshop.online" OR sourcehostname CONTAINS "signsafe.site" OR sourcehostname CONTAINS "secondshop.store" OR sourcehostname CONTAINS "botsc.autoupdate.xyz" OR sourcehostname CONTAINS "first.system-update.xyz" OR sourcehostname CONTAINS "image-support.xyz" OR sourcehostname CONTAINS "pre.alwayswait.site" OR sourcehostname CONTAINS "second.systemupdate.cloud" OR sourcehostname CONTAINS "second.awaitingfor.online" OR sourcehostname CONTAINS "safefor.xyz" OR sourcehostname CONTAINS "readysafe.xyz" OR sourcehostname CONTAINS "instant-update.online" OR sourcehostname CONTAINS "signsafe.xyz" OR sourcehostname CONTAINS "system.updatecheck.store" OR sourcehostname CONTAINS "dataupload.store" OR sourcehostname CONTAINS "safeupload.online" OR sourcehostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "download.datatabletemplate.xyz" OR destinationntdomain CONTAINS "check.datatabletemplate.shop" OR destinationntdomain CONTAINS "download.face-online.world" OR destinationntdomain CONTAINS "root.security-update.xyz" OR destinationntdomain CONTAINS "real-update.xyz" OR destinationntdomain CONTAINS "root.chkstate.online" OR destinationntdomain CONTAINS "secondshop.online" OR destinationntdomain CONTAINS "signsafe.site" OR destinationntdomain CONTAINS "secondshop.store" OR destinationntdomain CONTAINS "botsc.autoupdate.xyz" OR destinationntdomain CONTAINS "first.system-update.xyz" OR destinationntdomain CONTAINS "image-support.xyz" OR destinationntdomain CONTAINS "pre.alwayswait.site" OR destinationntdomain CONTAINS "second.systemupdate.cloud" OR destinationntdomain CONTAINS "second.awaitingfor.online" OR destinationntdomain CONTAINS "safefor.xyz" OR destinationntdomain CONTAINS "readysafe.xyz" OR destinationntdomain CONTAINS "instant-update.online" OR destinationntdomain CONTAINS "signsafe.xyz" OR destinationntdomain CONTAINS "system.updatecheck.store" OR destinationntdomain CONTAINS "dataupload.store" OR destinationntdomain CONTAINS "safeupload.online" OR destinationntdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND (requesturl CONTAINS "download.datatabletemplate.xyz" OR requesturl CONTAINS "check.datatabletemplate.shop" OR requesturl CONTAINS "download.face-online.world" OR requesturl CONTAINS "root.security-update.xyz" OR requesturl CONTAINS "real-update.xyz" OR requesturl CONTAINS "root.chkstate.online" OR requesturl CONTAINS "secondshop.online" OR requesturl CONTAINS "signsafe.site" OR requesturl CONTAINS "secondshop.store" OR requesturl CONTAINS "botsc.autoupdate.xyz" OR requesturl CONTAINS "first.system-update.xyz" OR requesturl CONTAINS "image-support.xyz" OR requesturl CONTAINS "pre.alwayswait.site" OR requesturl CONTAINS "second.systemupdate.cloud" OR requesturl CONTAINS "second.awaitingfor.online" OR requesturl CONTAINS "safefor.xyz" OR requesturl CONTAINS "readysafe.xyz" OR requesturl CONTAINS "instant-update.online" OR requesturl CONTAINS "signsafe.xyz" OR requesturl CONTAINS "system.updatecheck.store" OR requesturl CONTAINS "dataupload.store" OR requesturl CONTAINS "safeupload.online" OR requesturl CONTAINS "filedrive.online")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "download.datatabletemplate.xyz" OR destinationhostname CONTAINS "check.datatabletemplate.shop" OR destinationhostname CONTAINS "download.face-online.world" OR destinationhostname CONTAINS "root.security-update.xyz" OR destinationhostname CONTAINS "real-update.xyz" OR destinationhostname CONTAINS "root.chkstate.online" OR destinationhostname CONTAINS "secondshop.online" OR destinationhostname CONTAINS "signsafe.site" OR destinationhostname CONTAINS "secondshop.store" OR destinationhostname CONTAINS "botsc.autoupdate.xyz" OR destinationhostname CONTAINS "first.system-update.xyz" OR destinationhostname CONTAINS "image-support.xyz" OR destinationhostname CONTAINS "pre.alwayswait.site" OR destinationhostname CONTAINS "second.systemupdate.cloud" OR destinationhostname CONTAINS "second.awaitingfor.online" OR destinationhostname CONTAINS "safefor.xyz" OR destinationhostname CONTAINS "readysafe.xyz" OR destinationhostname CONTAINS "instant-update.online" OR destinationhostname CONTAINS "signsafe.xyz" OR destinationhostname CONTAINS "system.updatecheck.store" OR destinationhostname CONTAINS "dataupload.store" OR destinationhostname CONTAINS "safeupload.online" OR destinationhostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "download.datatabletemplate.xyz" OR sourcentdomain CONTAINS "check.datatabletemplate.shop" OR sourcentdomain CONTAINS "download.face-online.world" OR sourcentdomain CONTAINS "root.security-update.xyz" OR sourcentdomain CONTAINS "real-update.xyz" OR sourcentdomain CONTAINS "root.chkstate.online" OR sourcentdomain CONTAINS "secondshop.online" OR sourcentdomain CONTAINS "signsafe.site" OR sourcentdomain CONTAINS "secondshop.store" OR sourcentdomain CONTAINS "botsc.autoupdate.xyz" OR sourcentdomain CONTAINS "first.system-update.xyz" OR sourcentdomain CONTAINS "image-support.xyz" OR sourcentdomain CONTAINS "pre.alwayswait.site" OR sourcentdomain CONTAINS "second.systemupdate.cloud" OR sourcentdomain CONTAINS "second.awaitingfor.online" OR sourcentdomain CONTAINS "safefor.xyz" OR sourcentdomain CONTAINS "readysafe.xyz" OR sourcentdomain CONTAINS "instant-update.online" OR sourcentdomain CONTAINS "signsafe.xyz" OR sourcentdomain CONTAINS "system.updatecheck.store" OR sourcentdomain CONTAINS "dataupload.store" OR sourcentdomain CONTAINS "safeupload.online" OR sourcentdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "download.datatabletemplate.xyz" OR sourcehostname CONTAINS "check.datatabletemplate.shop" OR sourcehostname CONTAINS "download.face-online.world" OR sourcehostname CONTAINS "root.security-update.xyz" OR sourcehostname CONTAINS "real-update.xyz" OR sourcehostname CONTAINS "root.chkstate.online" OR sourcehostname CONTAINS "secondshop.online" OR sourcehostname CONTAINS "signsafe.site" OR sourcehostname CONTAINS "secondshop.store" OR sourcehostname CONTAINS "botsc.autoupdate.xyz" OR sourcehostname CONTAINS "first.system-update.xyz" OR sourcehostname CONTAINS "image-support.xyz" OR sourcehostname CONTAINS "pre.alwayswait.site" OR sourcehostname CONTAINS "second.systemupdate.cloud" OR sourcehostname CONTAINS "second.awaitingfor.online" OR sourcehostname CONTAINS "safefor.xyz" OR sourcehostname CONTAINS "readysafe.xyz" OR sourcehostname CONTAINS "instant-update.online" OR sourcehostname CONTAINS "signsafe.xyz" OR sourcehostname CONTAINS "system.updatecheck.store" OR sourcehostname CONTAINS "dataupload.store" OR sourcehostname CONTAINS "safeupload.online" OR sourcehostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "download.datatabletemplate.xyz" OR destinationntdomain CONTAINS "check.datatabletemplate.shop" OR destinationntdomain CONTAINS "download.face-online.world" OR destinationntdomain CONTAINS "root.security-update.xyz" OR destinationntdomain CONTAINS "real-update.xyz" OR destinationntdomain CONTAINS "root.chkstate.online" OR destinationntdomain CONTAINS "secondshop.online" OR destinationntdomain CONTAINS "signsafe.site" OR destinationntdomain CONTAINS "secondshop.store" OR destinationntdomain CONTAINS "botsc.autoupdate.xyz" OR destinationntdomain CONTAINS "first.system-update.xyz" OR destinationntdomain CONTAINS "image-support.xyz" OR destinationntdomain CONTAINS "pre.alwayswait.site" OR destinationntdomain CONTAINS "second.systemupdate.cloud" OR destinationntdomain CONTAINS "second.awaitingfor.online" OR destinationntdomain CONTAINS "safefor.xyz" OR destinationntdomain CONTAINS "readysafe.xyz" OR destinationntdomain CONTAINS "instant-update.online" OR destinationntdomain CONTAINS "signsafe.xyz" OR destinationntdomain CONTAINS "system.updatecheck.store" OR destinationntdomain CONTAINS "dataupload.store" OR destinationntdomain CONTAINS "safeupload.online" OR destinationntdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND (requesturl CONTAINS "download.datatabletemplate.xyz" OR requesturl CONTAINS "check.datatabletemplate.shop" OR requesturl CONTAINS "download.face-online.world" OR requesturl CONTAINS "root.security-update.xyz" OR requesturl CONTAINS "real-update.xyz" OR requesturl CONTAINS "root.chkstate.online" OR requesturl CONTAINS "secondshop.online" OR requesturl CONTAINS "signsafe.site" OR requesturl CONTAINS "secondshop.store" OR requesturl CONTAINS "botsc.autoupdate.xyz" OR requesturl CONTAINS "first.system-update.xyz" OR requesturl CONTAINS "image-support.xyz" OR requesturl CONTAINS "pre.alwayswait.site" OR requesturl CONTAINS "second.systemupdate.cloud" OR requesturl CONTAINS "second.awaitingfor.online" OR requesturl CONTAINS "safefor.xyz" OR requesturl CONTAINS "readysafe.xyz" OR requesturl CONTAINS "instant-update.online" OR requesturl CONTAINS "signsafe.xyz" OR requesturl CONTAINS "system.updatecheck.store" OR requesturl CONTAINS "dataupload.store" OR requesturl CONTAINS "safeupload.online" OR requesturl CONTAINS "filedrive.online")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "download.datatabletemplate.xyz" OR destinationhostname CONTAINS "check.datatabletemplate.shop" OR destinationhostname CONTAINS "download.face-online.world" OR destinationhostname CONTAINS "root.security-update.xyz" OR destinationhostname CONTAINS "real-update.xyz" OR destinationhostname CONTAINS "root.chkstate.online" OR destinationhostname CONTAINS "secondshop.online" OR destinationhostname CONTAINS "signsafe.site" OR destinationhostname CONTAINS "secondshop.store" OR destinationhostname CONTAINS "botsc.autoupdate.xyz" OR destinationhostname CONTAINS "first.system-update.xyz" OR destinationhostname CONTAINS "image-support.xyz" OR destinationhostname CONTAINS "pre.alwayswait.site" OR destinationhostname CONTAINS "second.systemupdate.cloud" OR destinationhostname CONTAINS "second.awaitingfor.online" OR destinationhostname CONTAINS "safefor.xyz" OR destinationhostname CONTAINS "readysafe.xyz" OR destinationhostname CONTAINS "instant-update.online" OR destinationhostname CONTAINS "signsafe.xyz" OR destinationhostname CONTAINS "system.updatecheck.store" OR destinationhostname CONTAINS "dataupload.store" OR destinationhostname CONTAINS "safeupload.online" OR destinationhostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "download.datatabletemplate.xyz" OR sourcentdomain CONTAINS "check.datatabletemplate.shop" OR sourcentdomain CONTAINS "download.face-online.world" OR sourcentdomain CONTAINS "root.security-update.xyz" OR sourcentdomain CONTAINS "real-update.xyz" OR sourcentdomain CONTAINS "root.chkstate.online" OR sourcentdomain CONTAINS "secondshop.online" OR sourcentdomain CONTAINS "signsafe.site" OR sourcentdomain CONTAINS "secondshop.store" OR sourcentdomain CONTAINS "botsc.autoupdate.xyz" OR sourcentdomain CONTAINS "first.system-update.xyz" OR sourcentdomain CONTAINS "image-support.xyz" OR sourcentdomain CONTAINS "pre.alwayswait.site" OR sourcentdomain CONTAINS "second.systemupdate.cloud" OR sourcentdomain CONTAINS "second.awaitingfor.online" OR sourcentdomain CONTAINS "safefor.xyz" OR sourcentdomain CONTAINS "readysafe.xyz" OR sourcentdomain CONTAINS "instant-update.online" OR sourcentdomain CONTAINS "signsafe.xyz" OR sourcentdomain CONTAINS "system.updatecheck.store" OR sourcentdomain CONTAINS "dataupload.store" OR sourcentdomain CONTAINS "safeupload.online" OR sourcentdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "download.datatabletemplate.xyz" OR sourcehostname CONTAINS "check.datatabletemplate.shop" OR sourcehostname CONTAINS "download.face-online.world" OR sourcehostname CONTAINS "root.security-update.xyz" OR sourcehostname CONTAINS "real-update.xyz" OR sourcehostname CONTAINS "root.chkstate.online" OR sourcehostname CONTAINS "secondshop.online" OR sourcehostname CONTAINS "signsafe.site" OR sourcehostname CONTAINS "secondshop.store" OR sourcehostname CONTAINS "botsc.autoupdate.xyz" OR sourcehostname CONTAINS "first.system-update.xyz" OR sourcehostname CONTAINS "image-support.xyz" OR sourcehostname CONTAINS "pre.alwayswait.site" OR sourcehostname CONTAINS "second.systemupdate.cloud" OR sourcehostname CONTAINS "second.awaitingfor.online" OR sourcehostname CONTAINS "safefor.xyz" OR sourcehostname CONTAINS "readysafe.xyz" OR sourcehostname CONTAINS "instant-update.online" OR sourcehostname CONTAINS "signsafe.xyz" OR sourcehostname CONTAINS "system.updatecheck.store" OR sourcehostname CONTAINS "dataupload.store" OR sourcehostname CONTAINS "safeupload.online" OR sourcehostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "download.datatabletemplate.xyz" OR destinationntdomain CONTAINS "check.datatabletemplate.shop" OR destinationntdomain CONTAINS "download.face-online.world" OR destinationntdomain CONTAINS "root.security-update.xyz" OR destinationntdomain CONTAINS "real-update.xyz" OR destinationntdomain CONTAINS "root.chkstate.online" OR destinationntdomain CONTAINS "secondshop.online" OR destinationntdomain CONTAINS "signsafe.site" OR destinationntdomain CONTAINS "secondshop.store" OR destinationntdomain CONTAINS "botsc.autoupdate.xyz" OR destinationntdomain CONTAINS "first.system-update.xyz" OR destinationntdomain CONTAINS "image-support.xyz" OR destinationntdomain CONTAINS "pre.alwayswait.site" OR destinationntdomain CONTAINS "second.systemupdate.cloud" OR destinationntdomain CONTAINS "second.awaitingfor.online" OR destinationntdomain CONTAINS "safefor.xyz" OR destinationntdomain CONTAINS "readysafe.xyz" OR destinationntdomain CONTAINS "instant-update.online" OR destinationntdomain CONTAINS "signsafe.xyz" OR destinationntdomain CONTAINS "system.updatecheck.store" OR destinationntdomain CONTAINS "dataupload.store" OR destinationntdomain CONTAINS "safeupload.online" OR destinationntdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "download.datatabletemplate.xyz" OR requesturl CONTAINS "check.datatabletemplate.shop" OR requesturl CONTAINS "download.face-online.world" OR requesturl CONTAINS "root.security-update.xyz" OR requesturl CONTAINS "real-update.xyz" OR requesturl CONTAINS "root.chkstate.online" OR requesturl CONTAINS "secondshop.online" OR requesturl CONTAINS "signsafe.site" OR requesturl CONTAINS "secondshop.store" OR requesturl CONTAINS "botsc.autoupdate.xyz" OR requesturl CONTAINS "first.system-update.xyz" OR requesturl CONTAINS "image-support.xyz" OR requesturl CONTAINS "pre.alwayswait.site" OR requesturl CONTAINS "second.systemupdate.cloud" OR requesturl CONTAINS "second.awaitingfor.online" OR requesturl CONTAINS "safefor.xyz" OR requesturl CONTAINS "readysafe.xyz" OR requesturl CONTAINS "instant-update.online" OR requesturl CONTAINS "signsafe.xyz" OR requesturl CONTAINS "system.updatecheck.store" OR requesturl CONTAINS "dataupload.store" OR requesturl CONTAINS "safeupload.online" OR requesturl CONTAINS "filedrive.online")
index=activity AND rg_functionality="DNS / DHCP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "download.datatabletemplate.xyz" OR destinationhostname CONTAINS "check.datatabletemplate.shop" OR destinationhostname CONTAINS "download.face-online.world" OR destinationhostname CONTAINS "root.security-update.xyz" OR destinationhostname CONTAINS "real-update.xyz" OR destinationhostname CONTAINS "root.chkstate.online" OR destinationhostname CONTAINS "secondshop.online" OR destinationhostname CONTAINS "signsafe.site" OR destinationhostname CONTAINS "secondshop.store" OR destinationhostname CONTAINS "botsc.autoupdate.xyz" OR destinationhostname CONTAINS "first.system-update.xyz" OR destinationhostname CONTAINS "image-support.xyz" OR destinationhostname CONTAINS "pre.alwayswait.site" OR destinationhostname CONTAINS "second.systemupdate.cloud" OR destinationhostname CONTAINS "second.awaitingfor.online" OR destinationhostname CONTAINS "safefor.xyz" OR destinationhostname CONTAINS "readysafe.xyz" OR destinationhostname CONTAINS "instant-update.online" OR destinationhostname CONTAINS "signsafe.xyz" OR destinationhostname CONTAINS "system.updatecheck.store" OR destinationhostname CONTAINS "dataupload.store" OR destinationhostname CONTAINS "safeupload.online" OR destinationhostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="DNS / DHCP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "download.datatabletemplate.xyz" OR sourcentdomain CONTAINS "check.datatabletemplate.shop" OR sourcentdomain CONTAINS "download.face-online.world" OR sourcentdomain CONTAINS "root.security-update.xyz" OR sourcentdomain CONTAINS "real-update.xyz" OR sourcentdomain CONTAINS "root.chkstate.online" OR sourcentdomain CONTAINS "secondshop.online" OR sourcentdomain CONTAINS "signsafe.site" OR sourcentdomain CONTAINS "secondshop.store" OR sourcentdomain CONTAINS "botsc.autoupdate.xyz" OR sourcentdomain CONTAINS "first.system-update.xyz" OR sourcentdomain CONTAINS "image-support.xyz" OR sourcentdomain CONTAINS "pre.alwayswait.site" OR sourcentdomain CONTAINS "second.systemupdate.cloud" OR sourcentdomain CONTAINS "second.awaitingfor.online" OR sourcentdomain CONTAINS "safefor.xyz" OR sourcentdomain CONTAINS "readysafe.xyz" OR sourcentdomain CONTAINS "instant-update.online" OR sourcentdomain CONTAINS "signsafe.xyz" OR sourcentdomain CONTAINS "system.updatecheck.store" OR sourcentdomain CONTAINS "dataupload.store" OR sourcentdomain CONTAINS "safeupload.online" OR sourcentdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="DNS / DHCP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "download.datatabletemplate.xyz" OR sourcehostname CONTAINS "check.datatabletemplate.shop" OR sourcehostname CONTAINS "download.face-online.world" OR sourcehostname CONTAINS "root.security-update.xyz" OR sourcehostname CONTAINS "real-update.xyz" OR sourcehostname CONTAINS "root.chkstate.online" OR sourcehostname CONTAINS "secondshop.online" OR sourcehostname CONTAINS "signsafe.site" OR sourcehostname CONTAINS "secondshop.store" OR sourcehostname CONTAINS "botsc.autoupdate.xyz" OR sourcehostname CONTAINS "first.system-update.xyz" OR sourcehostname CONTAINS "image-support.xyz" OR sourcehostname CONTAINS "pre.alwayswait.site" OR sourcehostname CONTAINS "second.systemupdate.cloud" OR sourcehostname CONTAINS "second.awaitingfor.online" OR sourcehostname CONTAINS "safefor.xyz" OR sourcehostname CONTAINS "readysafe.xyz" OR sourcehostname CONTAINS "instant-update.online" OR sourcehostname CONTAINS "signsafe.xyz" OR sourcehostname CONTAINS "system.updatecheck.store" OR sourcehostname CONTAINS "dataupload.store" OR sourcehostname CONTAINS "safeupload.online" OR sourcehostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="DNS / DHCP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "download.datatabletemplate.xyz" OR destinationntdomain CONTAINS "check.datatabletemplate.shop" OR destinationntdomain CONTAINS "download.face-online.world" OR destinationntdomain CONTAINS "root.security-update.xyz" OR destinationntdomain CONTAINS "real-update.xyz" OR destinationntdomain CONTAINS "root.chkstate.online" OR destinationntdomain CONTAINS "secondshop.online" OR destinationntdomain CONTAINS "signsafe.site" OR destinationntdomain CONTAINS "secondshop.store" OR destinationntdomain CONTAINS "botsc.autoupdate.xyz" OR destinationntdomain CONTAINS "first.system-update.xyz" OR destinationntdomain CONTAINS "image-support.xyz" OR destinationntdomain CONTAINS "pre.alwayswait.site" OR destinationntdomain CONTAINS "second.systemupdate.cloud" OR destinationntdomain CONTAINS "second.awaitingfor.online" OR destinationntdomain CONTAINS "safefor.xyz" OR destinationntdomain CONTAINS "readysafe.xyz" OR destinationntdomain CONTAINS "instant-update.online" OR destinationntdomain CONTAINS "signsafe.xyz" OR destinationntdomain CONTAINS "system.updatecheck.store" OR destinationntdomain CONTAINS "dataupload.store" OR destinationntdomain CONTAINS "safeupload.online" OR destinationntdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND (requesturl CONTAINS "download.datatabletemplate.xyz" OR requesturl CONTAINS "check.datatabletemplate.shop" OR requesturl CONTAINS "download.face-online.world" OR requesturl CONTAINS "root.security-update.xyz" OR requesturl CONTAINS "real-update.xyz" OR requesturl CONTAINS "root.chkstate.online" OR requesturl CONTAINS "secondshop.online" OR requesturl CONTAINS "signsafe.site" OR requesturl CONTAINS "secondshop.store" OR requesturl CONTAINS "botsc.autoupdate.xyz" OR requesturl CONTAINS "first.system-update.xyz" OR requesturl CONTAINS "image-support.xyz" OR requesturl CONTAINS "pre.alwayswait.site" OR requesturl CONTAINS "second.systemupdate.cloud" OR requesturl CONTAINS "second.awaitingfor.online" OR requesturl CONTAINS "safefor.xyz" OR requesturl CONTAINS "readysafe.xyz" OR requesturl CONTAINS "instant-update.online" OR requesturl CONTAINS "signsafe.xyz" OR requesturl CONTAINS "system.updatecheck.store" OR requesturl CONTAINS "dataupload.store" OR requesturl CONTAINS "safeupload.online" OR requesturl CONTAINS "filedrive.online")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "download.datatabletemplate.xyz" OR destinationhostname CONTAINS "check.datatabletemplate.shop" OR destinationhostname CONTAINS "download.face-online.world" OR destinationhostname CONTAINS "root.security-update.xyz" OR destinationhostname CONTAINS "real-update.xyz" OR destinationhostname CONTAINS "root.chkstate.online" OR destinationhostname CONTAINS "secondshop.online" OR destinationhostname CONTAINS "signsafe.site" OR destinationhostname CONTAINS "secondshop.store" OR destinationhostname CONTAINS "botsc.autoupdate.xyz" OR destinationhostname CONTAINS "first.system-update.xyz" OR destinationhostname CONTAINS "image-support.xyz" OR destinationhostname CONTAINS "pre.alwayswait.site" OR destinationhostname CONTAINS "second.systemupdate.cloud" OR destinationhostname CONTAINS "second.awaitingfor.online" OR destinationhostname CONTAINS "safefor.xyz" OR destinationhostname CONTAINS "readysafe.xyz" OR destinationhostname CONTAINS "instant-update.online" OR destinationhostname CONTAINS "signsafe.xyz" OR destinationhostname CONTAINS "system.updatecheck.store" OR destinationhostname CONTAINS "dataupload.store" OR destinationhostname CONTAINS "safeupload.online" OR destinationhostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "download.datatabletemplate.xyz" OR sourcentdomain CONTAINS "check.datatabletemplate.shop" OR sourcentdomain CONTAINS "download.face-online.world" OR sourcentdomain CONTAINS "root.security-update.xyz" OR sourcentdomain CONTAINS "real-update.xyz" OR sourcentdomain CONTAINS "root.chkstate.online" OR sourcentdomain CONTAINS "secondshop.online" OR sourcentdomain CONTAINS "signsafe.site" OR sourcentdomain CONTAINS "secondshop.store" OR sourcentdomain CONTAINS "botsc.autoupdate.xyz" OR sourcentdomain CONTAINS "first.system-update.xyz" OR sourcentdomain CONTAINS "image-support.xyz" OR sourcentdomain CONTAINS "pre.alwayswait.site" OR sourcentdomain CONTAINS "second.systemupdate.cloud" OR sourcentdomain CONTAINS "second.awaitingfor.online" OR sourcentdomain CONTAINS "safefor.xyz" OR sourcentdomain CONTAINS "readysafe.xyz" OR sourcentdomain CONTAINS "instant-update.online" OR sourcentdomain CONTAINS "signsafe.xyz" OR sourcentdomain CONTAINS "system.updatecheck.store" OR sourcentdomain CONTAINS "dataupload.store" OR sourcentdomain CONTAINS "safeupload.online" OR sourcentdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "download.datatabletemplate.xyz" OR sourcehostname CONTAINS "check.datatabletemplate.shop" OR sourcehostname CONTAINS "download.face-online.world" OR sourcehostname CONTAINS "root.security-update.xyz" OR sourcehostname CONTAINS "real-update.xyz" OR sourcehostname CONTAINS "root.chkstate.online" OR sourcehostname CONTAINS "secondshop.online" OR sourcehostname CONTAINS "signsafe.site" OR sourcehostname CONTAINS "secondshop.store" OR sourcehostname CONTAINS "botsc.autoupdate.xyz" OR sourcehostname CONTAINS "first.system-update.xyz" OR sourcehostname CONTAINS "image-support.xyz" OR sourcehostname CONTAINS "pre.alwayswait.site" OR sourcehostname CONTAINS "second.systemupdate.cloud" OR sourcehostname CONTAINS "second.awaitingfor.online" OR sourcehostname CONTAINS "safefor.xyz" OR sourcehostname CONTAINS "readysafe.xyz" OR sourcehostname CONTAINS "instant-update.online" OR sourcehostname CONTAINS "signsafe.xyz" OR sourcehostname CONTAINS "system.updatecheck.store" OR sourcehostname CONTAINS "dataupload.store" OR sourcehostname CONTAINS "safeupload.online" OR sourcehostname CONTAINS "filedrive.online")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "download.datatabletemplate.xyz" OR destinationntdomain CONTAINS "check.datatabletemplate.shop" OR destinationntdomain CONTAINS "download.face-online.world" OR destinationntdomain CONTAINS "root.security-update.xyz" OR destinationntdomain CONTAINS "real-update.xyz" OR destinationntdomain CONTAINS "root.chkstate.online" OR destinationntdomain CONTAINS "secondshop.online" OR destinationntdomain CONTAINS "signsafe.site" OR destinationntdomain CONTAINS "secondshop.store" OR destinationntdomain CONTAINS "botsc.autoupdate.xyz" OR destinationntdomain CONTAINS "first.system-update.xyz" OR destinationntdomain CONTAINS "image-support.xyz" OR destinationntdomain CONTAINS "pre.alwayswait.site" OR destinationntdomain CONTAINS "second.systemupdate.cloud" OR destinationntdomain CONTAINS "second.awaitingfor.online" OR destinationntdomain CONTAINS "safefor.xyz" OR destinationntdomain CONTAINS "readysafe.xyz" OR destinationntdomain CONTAINS "instant-update.online" OR destinationntdomain CONTAINS "signsafe.xyz" OR destinationntdomain CONTAINS "system.updatecheck.store" OR destinationntdomain CONTAINS "dataupload.store" OR destinationntdomain CONTAINS "safeupload.online" OR destinationntdomain CONTAINS "filedrive.online")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND (requesturl CONTAINS "download.datatabletemplate.xyz" OR requesturl CONTAINS "check.datatabletemplate.shop" OR requesturl CONTAINS "download.face-online.world" OR requesturl CONTAINS "root.security-update.xyz" OR requesturl CONTAINS "real-update.xyz" OR requesturl CONTAINS "root.chkstate.online" OR requesturl CONTAINS "secondshop.online" OR requesturl CONTAINS "signsafe.site" OR requesturl CONTAINS "secondshop.store" OR requesturl CONTAINS "botsc.autoupdate.xyz" OR requesturl CONTAINS "first.system-update.xyz" OR requesturl CONTAINS "image-support.xyz" OR requesturl CONTAINS "pre.alwayswait.site" OR requesturl CONTAINS "second.systemupdate.cloud" OR requesturl CONTAINS "second.awaitingfor.online" OR requesturl CONTAINS "safefor.xyz" OR requesturl CONTAINS "readysafe.xyz" OR requesturl CONTAINS "instant-update.online" OR requesturl CONTAINS "signsafe.xyz" OR requesturl CONTAINS "system.updatecheck.store" OR requesturl CONTAINS "dataupload.store" OR requesturl CONTAINS "safeupload.online" OR requesturl CONTAINS "filedrive.online")
index=activity AND rg_functionality="Next Generation Firewall" AND filehash NOT NULL AND filehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Next Generation Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring64 NOT NULL AND customstring64 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Next Generation Firewall" AND filehash NOT NULL AND filehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Next Generation Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring64 NOT NULL AND customstring64 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Firewall" AND filehash NOT NULL AND filehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Firewall" AND customstring64 NOT NULL AND customstring64 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Firewall" AND filehash NOT NULL AND filehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Firewall" AND customstring64 NOT NULL AND customstring64 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Web Proxy" AND filehash NOT NULL AND filehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Web Proxy" AND oldfilehash NOT NULL AND oldfilehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Web Proxy" AND customstring64 NOT NULL AND customstring64 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Web Proxy" AND filehash NOT NULL AND filehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Web Proxy" AND oldfilehash NOT NULL AND oldfilehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Web Proxy" AND customstring64 NOT NULL AND customstring64 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Flow" AND filehash NOT NULL AND filehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Flow" AND oldfilehash NOT NULL AND oldfilehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Flow" AND customstring64 NOT NULL AND customstring64 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Flow" AND filehash NOT NULL AND filehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Flow" AND oldfilehash NOT NULL AND oldfilehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Flow" AND customstring64 NOT NULL AND customstring64 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Web Server" AND filehash NOT NULL AND filehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Web Server" AND oldfilehash NOT NULL AND oldfilehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Web Server" AND customstring64 NOT NULL AND customstring64 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Web Server" AND filehash NOT NULL AND filehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Web Server" AND oldfilehash NOT NULL AND oldfilehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Web Server" AND customstring64 NOT NULL AND customstring64 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Web Application Firewall" AND filehash NOT NULL AND filehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Web Application Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Web Application Firewall" AND customstring64 NOT NULL AND customstring64 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Web Application Firewall" AND filehash NOT NULL AND filehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Web Application Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Web Application Firewall" AND customstring64 NOT NULL AND customstring64 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Endpoint management systems" AND filehash NOT NULL AND filehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Endpoint management systems" AND oldfilehash NOT NULL AND oldfilehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Endpoint management systems" AND customstring64 NOT NULL AND customstring64 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Endpoint management systems" AND filehash NOT NULL AND filehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Endpoint management systems" AND oldfilehash NOT NULL AND oldfilehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Endpoint management systems" AND customstring64 NOT NULL AND customstring64 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Cloud Application Audit" AND filehash NOT NULL AND filehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Cloud Application Audit" AND oldfilehash NOT NULL AND oldfilehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring64 NOT NULL AND customstring64 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Cloud Application Audit" AND filehash NOT NULL AND filehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Cloud Application Audit" AND oldfilehash NOT NULL AND oldfilehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring64 NOT NULL AND customstring64 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Unix / Linux / AIX" AND filehash NOT NULL AND filehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Unix / Linux / AIX" AND oldfilehash NOT NULL AND oldfilehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring64 NOT NULL AND customstring64 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Unix / Linux / AIX" AND filehash NOT NULL AND filehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Unix / Linux / AIX" AND oldfilehash NOT NULL AND oldfilehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring64 NOT NULL AND customstring64 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Cloud Application Security Broker" AND filehash NOT NULL AND filehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Cloud Application Security Broker" AND oldfilehash NOT NULL AND oldfilehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring64 NOT NULL AND customstring64 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Cloud Application Security Broker" AND filehash NOT NULL AND filehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Cloud Application Security Broker" AND oldfilehash NOT NULL AND oldfilehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring64 NOT NULL AND customstring64 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Source Code Repository" AND filehash NOT NULL AND filehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Source Code Repository" AND oldfilehash NOT NULL AND oldfilehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Source Code Repository" AND customstring64 NOT NULL AND customstring64 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Source Code Repository" AND filehash NOT NULL AND filehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Source Code Repository" AND oldfilehash NOT NULL AND oldfilehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Source Code Repository" AND customstring64 NOT NULL AND customstring64 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="DNS / DHCP" AND filehash NOT NULL AND filehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="DNS / DHCP" AND oldfilehash NOT NULL AND oldfilehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="DNS / DHCP" AND customstring3 NOT NULL AND customstring3 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="DNS / DHCP" AND customstring64 NOT NULL AND customstring64 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="DNS / DHCP" AND filehash NOT NULL AND filehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="DNS / DHCP" AND oldfilehash NOT NULL AND oldfilehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="DNS / DHCP" AND customstring3 NOT NULL AND customstring3 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="DNS / DHCP" AND customstring64 NOT NULL AND customstring64 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND filehash NOT NULL AND filehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND oldfilehash NOT NULL AND oldfilehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring64 NOT NULL AND customstring64 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND filehash NOT NULL AND filehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND oldfilehash NOT NULL AND oldfilehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring64 NOT NULL AND customstring64 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("e33f942cf1479ca8530a916868bad954","963f473f1734d8b3fbb8c9a227c06d07","60bfe4f378e9f5a84183ac505a032228","7f94ed2d5f566c12de5ebe4b5e3d8aa3","389447013870120775556bb4519dba97","50f341b24cb75f37d042d1e5f9e3e5aa","a26f2b97ca4e2b4b5d58933900f02131","6422795a6df10c45c1006f92d686ee7e","931cec3c80c78d233e3602a042a2e71b","c42c7a2ea1c2f00dddb0cc4c8bfb5bcf","9551b4af789b2db563f9452eaf46b6aa","76ace3a6892c25512b17ed42ac2ebd05","19a7e16332a6860b65e6944f1f3c5001","c446682f33641cff21083ac2ce477dbe","e8680d17fba6425e4a9bb552fb8db2b1","10cd1ef394bc2a2d8d8f2558b73ac7b8","a070b77c5028d7a5d2895f1c9d35016f","38c8d80dd32d00e9c9440a498f7dd739","7168ce5c6e5545a5b389db09c90038da","261a409946b6b4d9ce706242a76134e3","31b88dd319af8e4b8a96fc9732ebc708","1ee10fa01587cec51f455ceec779a160","3bbe4dfe3134c8a7928d10c948e20bee","7581854ff6c890684823f3aed03c210f","01d3ed1c228f09d8e56bfbc5f5622a6c","5cb4f0084f3c25e640952753ed5b25d0","1243968876262c3ad4250e1371447b23","5ad40a5fd18a1b57b69c44bc2963dc6b","6348b49f3499d760797247b94385fda3","17baae144d383e4dc32f1bf69700e587","8f8942cd14f646f59729f83cbd4c357b","0af11f610da1f691e43173d44643283f","7e50c3f301dd045eb189ba1644ded155","0ca37675d75af0e7def0025cd564d6c5","d63805e89053716b6ab93ce6decf8450","e9fdd703e60b31eb803b1b59985cabec","f1d2af27b13cd3424556b18dfd3cf83f","b567bfdaac131a2d8a23ad8fd450a31d","00dd47af3db45548d2722fe8a4489508","6aa93664b4852cb5bad84ba1a187f645","d8529855fab4b4aa6c2b34449cb3b9fb","eda0525c078f5a216a977bc64e86160a","ab1e8693931f8c694247d96cf5a85197","1653d75d579872fadec1f22cf7fee3c0","529fe6eff1cf452680976087e2250c02","a0eb7e480752d494709c63aa35ccf36c","73d26eb56e5a3426884733c104c3f625","358c2969041c8be74ce478edb2ffcd19","2c42253ebf9a743814b9b16a89522bef","f1bad0efbd3bd5a4202fe740756f977a")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("a6ce961f487b4cbdfe68d0a249647c48","8006efb8dd703073197e5a27682b35bf","c6f0c8d41b9ad4f079161548d2435d80","f8bb2528bf35f8c11fbc4369e68c4038","b2e9a6412fd7c068a5d7c38d0afd946f","de93e85199240de761a8ba0a56f0088d")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Firewall" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Endpoint management systems" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Endpoint management systems" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Application Audit" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Application Audit" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Unix / Linux / AIX" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Unix / Linux / AIX" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="DNS / DHCP" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="DNS / DHCP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="DNS / DHCP" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="O365 General" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="O365 General" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="O365 General" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("http://web071zoom.us/fix/audio/4542828056","http://web071zoom.us/fix/audio-fv/7217417464","http://web071zoom.us/fix/audio-tr/7217417464","https://support.ms-live.us/301631/check","https://support.ms-live.us/register/22989524464ucx2b5w52","https://support.ms-live.us/update/02583235891m49fyun57","https://safeupload.online/uploadfiles","https://api.clearit.sbs/uploadfiles","https://api.flashstore.sbs/uploadfiles","https://filedrive.online/uploadfiles","https://bots.autoupdate.online:8080/test","https://writeup.live/test","https://safeup.store/test","https://api.clearit.sbs/test","https://api.flashstore.sbs/test","https://web.commoncome.online:8080/client","https://first.longlastfor.online:8080/client","https://firstfromsep.online/client","https://metamask.awaitingfor.site/update","https://urgent-update.cloud/uploadfiles","https://dataupload.store/uploadfiles","https://filedrive.online/uploadfiles","https://chkactive.online/update","https://file-server.store/update","https://cloud-server.store/update","https://flashserve.store/update")
