index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("cd8834da2cfb0285fa75decf6c67d049","3cd599654aff2e432ae3390d33c64f5e","144ccb808e2d2e1f0119ea2a8f7490bc","2b0338c9f3f46955cfd2dc97c02bd554","5a2845ee84fe5ed2eb987bd684dbeae5c524eb3cdfa918e32c88add63ba69fad","ea47d88d73fecb1fad1e737f1b373d7","97e16c0b770dbbe4fa94cebac92082b7","0f9b541156c0825ab309af9007803b169a30dcd58d8329955c4eb047c5f21f2e","ea47d88d73fecb1fad1e737f1b373d7f","ea47d88d73fecb1fad1e737f1b373d7f","a236cb7f2b0e34619039788de7f7760b","bb5d5aa07fa2c8e9874c117c8fa51d6","da305627acf63792acb02afaf83d94d1","06124da5b4d6ef31dbfd7a6094fc52a6","36ff9ec87c458d6d76b2afbd5120dfae","2f14b3d5ab01568e2707925783f8eafe","4a5de4784a6005aa8a19fb0889f1947a","2a843511cdb8f5604cb3fafe244ef5f2","6b413beb61e46241481f556bb5cdb69c","a0c4ddf9c6f95d7046be8a2e0f875935","ca9290709843584aecbd6564fb978bd6","cf204319f7397a6a31ecf76c9531a549","b8b7a10dcc0dad157191620b5d4e5312","2fdf9f3a25e039a41e743e19550d4040","aa5e8268e741346c76ebfd1f27941a14","e56555162c559a55021b879147b0791","9ad4a2dfd4cb49ef55f2acd320659b83","15c525b74b7251cfa1f7c471975f3f95","c8bf238641621212901517570e96fae","4f11abdb96be36e3806bada5b8b2b8f8","9ea3aaaeb15a074cd617ee1dfdda2c26","e34d6387d3ab063b0d926ac1fca8c4c4","2556a9e1d5e9874171f51620e5c5e09a)","8fc42ee971ab296f921bb05633f6b4a6","a9dcaf1c709f96bc125c8d1262bac4b","d2a795af12e937eb8a89d470a96f15a5","047fbbb380cbf9cd263c482b70ddb26f","d87a3651e5259b79fe0e9bbf67680bd6b6b80ef2d5957584d86f45413194f177","047fbbb380cbf9cd263c482b70ddb26f","047fbbb380cbf9cd263c482b70ddb26f")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("cd8834da2cfb0285fa75decf6c67d049","3cd599654aff2e432ae3390d33c64f5e","144ccb808e2d2e1f0119ea2a8f7490bc","2b0338c9f3f46955cfd2dc97c02bd554","5a2845ee84fe5ed2eb987bd684dbeae5c524eb3cdfa918e32c88add63ba69fad","ea47d88d73fecb1fad1e737f1b373d7","97e16c0b770dbbe4fa94cebac92082b7","0f9b541156c0825ab309af9007803b169a30dcd58d8329955c4eb047c5f21f2e","ea47d88d73fecb1fad1e737f1b373d7f","ea47d88d73fecb1fad1e737f1b373d7f","a236cb7f2b0e34619039788de7f7760b","bb5d5aa07fa2c8e9874c117c8fa51d6","da305627acf63792acb02afaf83d94d1","06124da5b4d6ef31dbfd7a6094fc52a6","36ff9ec87c458d6d76b2afbd5120dfae","2f14b3d5ab01568e2707925783f8eafe","4a5de4784a6005aa8a19fb0889f1947a","2a843511cdb8f5604cb3fafe244ef5f2","6b413beb61e46241481f556bb5cdb69c","a0c4ddf9c6f95d7046be8a2e0f875935","ca9290709843584aecbd6564fb978bd6","cf204319f7397a6a31ecf76c9531a549","b8b7a10dcc0dad157191620b5d4e5312","2fdf9f3a25e039a41e743e19550d4040","aa5e8268e741346c76ebfd1f27941a14","e56555162c559a55021b879147b0791","9ad4a2dfd4cb49ef55f2acd320659b83","15c525b74b7251cfa1f7c471975f3f95","c8bf238641621212901517570e96fae","4f11abdb96be36e3806bada5b8b2b8f8","9ea3aaaeb15a074cd617ee1dfdda2c26","e34d6387d3ab063b0d926ac1fca8c4c4","2556a9e1d5e9874171f51620e5c5e09a)","8fc42ee971ab296f921bb05633f6b4a6","a9dcaf1c709f96bc125c8d1262bac4b","d2a795af12e937eb8a89d470a96f15a5","047fbbb380cbf9cd263c482b70ddb26f","d87a3651e5259b79fe0e9bbf67680bd6b6b80ef2d5957584d86f45413194f177","047fbbb380cbf9cd263c482b70ddb26f","047fbbb380cbf9cd263c482b70ddb26f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("cd8834da2cfb0285fa75decf6c67d049","3cd599654aff2e432ae3390d33c64f5e","144ccb808e2d2e1f0119ea2a8f7490bc","2b0338c9f3f46955cfd2dc97c02bd554","5a2845ee84fe5ed2eb987bd684dbeae5c524eb3cdfa918e32c88add63ba69fad","ea47d88d73fecb1fad1e737f1b373d7","97e16c0b770dbbe4fa94cebac92082b7","0f9b541156c0825ab309af9007803b169a30dcd58d8329955c4eb047c5f21f2e","ea47d88d73fecb1fad1e737f1b373d7f","ea47d88d73fecb1fad1e737f1b373d7f","a236cb7f2b0e34619039788de7f7760b","bb5d5aa07fa2c8e9874c117c8fa51d6","da305627acf63792acb02afaf83d94d1","06124da5b4d6ef31dbfd7a6094fc52a6","36ff9ec87c458d6d76b2afbd5120dfae","2f14b3d5ab01568e2707925783f8eafe","4a5de4784a6005aa8a19fb0889f1947a","2a843511cdb8f5604cb3fafe244ef5f2","6b413beb61e46241481f556bb5cdb69c","a0c4ddf9c6f95d7046be8a2e0f875935","ca9290709843584aecbd6564fb978bd6","cf204319f7397a6a31ecf76c9531a549","b8b7a10dcc0dad157191620b5d4e5312","2fdf9f3a25e039a41e743e19550d4040","aa5e8268e741346c76ebfd1f27941a14","e56555162c559a55021b879147b0791","9ad4a2dfd4cb49ef55f2acd320659b83","15c525b74b7251cfa1f7c471975f3f95","c8bf238641621212901517570e96fae","4f11abdb96be36e3806bada5b8b2b8f8","9ea3aaaeb15a074cd617ee1dfdda2c26","e34d6387d3ab063b0d926ac1fca8c4c4","2556a9e1d5e9874171f51620e5c5e09a)","8fc42ee971ab296f921bb05633f6b4a6","a9dcaf1c709f96bc125c8d1262bac4b","d2a795af12e937eb8a89d470a96f15a5","047fbbb380cbf9cd263c482b70ddb26f","d87a3651e5259b79fe0e9bbf67680bd6b6b80ef2d5957584d86f45413194f177","047fbbb380cbf9cd263c482b70ddb26f","047fbbb380cbf9cd263c482b70ddb26f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("cd8834da2cfb0285fa75decf6c67d049","3cd599654aff2e432ae3390d33c64f5e","144ccb808e2d2e1f0119ea2a8f7490bc","2b0338c9f3f46955cfd2dc97c02bd554","5a2845ee84fe5ed2eb987bd684dbeae5c524eb3cdfa918e32c88add63ba69fad","ea47d88d73fecb1fad1e737f1b373d7","97e16c0b770dbbe4fa94cebac92082b7","0f9b541156c0825ab309af9007803b169a30dcd58d8329955c4eb047c5f21f2e","ea47d88d73fecb1fad1e737f1b373d7f","ea47d88d73fecb1fad1e737f1b373d7f","a236cb7f2b0e34619039788de7f7760b","bb5d5aa07fa2c8e9874c117c8fa51d6","da305627acf63792acb02afaf83d94d1","06124da5b4d6ef31dbfd7a6094fc52a6","36ff9ec87c458d6d76b2afbd5120dfae","2f14b3d5ab01568e2707925783f8eafe","4a5de4784a6005aa8a19fb0889f1947a","2a843511cdb8f5604cb3fafe244ef5f2","6b413beb61e46241481f556bb5cdb69c","a0c4ddf9c6f95d7046be8a2e0f875935","ca9290709843584aecbd6564fb978bd6","cf204319f7397a6a31ecf76c9531a549","b8b7a10dcc0dad157191620b5d4e5312","2fdf9f3a25e039a41e743e19550d4040","aa5e8268e741346c76ebfd1f27941a14","e56555162c559a55021b879147b0791","9ad4a2dfd4cb49ef55f2acd320659b83","15c525b74b7251cfa1f7c471975f3f95","c8bf238641621212901517570e96fae","4f11abdb96be36e3806bada5b8b2b8f8","9ea3aaaeb15a074cd617ee1dfdda2c26","e34d6387d3ab063b0d926ac1fca8c4c4","2556a9e1d5e9874171f51620e5c5e09a)","8fc42ee971ab296f921bb05633f6b4a6","a9dcaf1c709f96bc125c8d1262bac4b","d2a795af12e937eb8a89d470a96f15a5","047fbbb380cbf9cd263c482b70ddb26f","d87a3651e5259b79fe0e9bbf67680bd6b6b80ef2d5957584d86f45413194f177","047fbbb380cbf9cd263c482b70ddb26f","047fbbb380cbf9cd263c482b70ddb26f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("cd8834da2cfb0285fa75decf6c67d049","3cd599654aff2e432ae3390d33c64f5e","144ccb808e2d2e1f0119ea2a8f7490bc","2b0338c9f3f46955cfd2dc97c02bd554","5a2845ee84fe5ed2eb987bd684dbeae5c524eb3cdfa918e32c88add63ba69fad","ea47d88d73fecb1fad1e737f1b373d7","97e16c0b770dbbe4fa94cebac92082b7","0f9b541156c0825ab309af9007803b169a30dcd58d8329955c4eb047c5f21f2e","ea47d88d73fecb1fad1e737f1b373d7f","ea47d88d73fecb1fad1e737f1b373d7f","a236cb7f2b0e34619039788de7f7760b","bb5d5aa07fa2c8e9874c117c8fa51d6","da305627acf63792acb02afaf83d94d1","06124da5b4d6ef31dbfd7a6094fc52a6","36ff9ec87c458d6d76b2afbd5120dfae","2f14b3d5ab01568e2707925783f8eafe","4a5de4784a6005aa8a19fb0889f1947a","2a843511cdb8f5604cb3fafe244ef5f2","6b413beb61e46241481f556bb5cdb69c","a0c4ddf9c6f95d7046be8a2e0f875935","ca9290709843584aecbd6564fb978bd6","cf204319f7397a6a31ecf76c9531a549","b8b7a10dcc0dad157191620b5d4e5312","2fdf9f3a25e039a41e743e19550d4040","aa5e8268e741346c76ebfd1f27941a14","e56555162c559a55021b879147b0791","9ad4a2dfd4cb49ef55f2acd320659b83","15c525b74b7251cfa1f7c471975f3f95","c8bf238641621212901517570e96fae","4f11abdb96be36e3806bada5b8b2b8f8","9ea3aaaeb15a074cd617ee1dfdda2c26","e34d6387d3ab063b0d926ac1fca8c4c4","2556a9e1d5e9874171f51620e5c5e09a)","8fc42ee971ab296f921bb05633f6b4a6","a9dcaf1c709f96bc125c8d1262bac4b","d2a795af12e937eb8a89d470a96f15a5","047fbbb380cbf9cd263c482b70ddb26f","d87a3651e5259b79fe0e9bbf67680bd6b6b80ef2d5957584d86f45413194f177","047fbbb380cbf9cd263c482b70ddb26f","047fbbb380cbf9cd263c482b70ddb26f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("cd8834da2cfb0285fa75decf6c67d049","3cd599654aff2e432ae3390d33c64f5e","144ccb808e2d2e1f0119ea2a8f7490bc","2b0338c9f3f46955cfd2dc97c02bd554","5a2845ee84fe5ed2eb987bd684dbeae5c524eb3cdfa918e32c88add63ba69fad","ea47d88d73fecb1fad1e737f1b373d7","97e16c0b770dbbe4fa94cebac92082b7","0f9b541156c0825ab309af9007803b169a30dcd58d8329955c4eb047c5f21f2e","ea47d88d73fecb1fad1e737f1b373d7f","ea47d88d73fecb1fad1e737f1b373d7f","a236cb7f2b0e34619039788de7f7760b","bb5d5aa07fa2c8e9874c117c8fa51d6","da305627acf63792acb02afaf83d94d1","06124da5b4d6ef31dbfd7a6094fc52a6","36ff9ec87c458d6d76b2afbd5120dfae","2f14b3d5ab01568e2707925783f8eafe","4a5de4784a6005aa8a19fb0889f1947a","2a843511cdb8f5604cb3fafe244ef5f2","6b413beb61e46241481f556bb5cdb69c","a0c4ddf9c6f95d7046be8a2e0f875935","ca9290709843584aecbd6564fb978bd6","cf204319f7397a6a31ecf76c9531a549","b8b7a10dcc0dad157191620b5d4e5312","2fdf9f3a25e039a41e743e19550d4040","aa5e8268e741346c76ebfd1f27941a14","e56555162c559a55021b879147b0791","9ad4a2dfd4cb49ef55f2acd320659b83","15c525b74b7251cfa1f7c471975f3f95","c8bf238641621212901517570e96fae","4f11abdb96be36e3806bada5b8b2b8f8","9ea3aaaeb15a074cd617ee1dfdda2c26","e34d6387d3ab063b0d926ac1fca8c4c4","2556a9e1d5e9874171f51620e5c5e09a)","8fc42ee971ab296f921bb05633f6b4a6","a9dcaf1c709f96bc125c8d1262bac4b","d2a795af12e937eb8a89d470a96f15a5","047fbbb380cbf9cd263c482b70ddb26f","d87a3651e5259b79fe0e9bbf67680bd6b6b80ef2d5957584d86f45413194f177","047fbbb380cbf9cd263c482b70ddb26f","047fbbb380cbf9cd263c482b70ddb26f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("cd8834da2cfb0285fa75decf6c67d049","3cd599654aff2e432ae3390d33c64f5e","144ccb808e2d2e1f0119ea2a8f7490bc","2b0338c9f3f46955cfd2dc97c02bd554","5a2845ee84fe5ed2eb987bd684dbeae5c524eb3cdfa918e32c88add63ba69fad","ea47d88d73fecb1fad1e737f1b373d7","97e16c0b770dbbe4fa94cebac92082b7","0f9b541156c0825ab309af9007803b169a30dcd58d8329955c4eb047c5f21f2e","ea47d88d73fecb1fad1e737f1b373d7f","ea47d88d73fecb1fad1e737f1b373d7f","a236cb7f2b0e34619039788de7f7760b","bb5d5aa07fa2c8e9874c117c8fa51d6","da305627acf63792acb02afaf83d94d1","06124da5b4d6ef31dbfd7a6094fc52a6","36ff9ec87c458d6d76b2afbd5120dfae","2f14b3d5ab01568e2707925783f8eafe","4a5de4784a6005aa8a19fb0889f1947a","2a843511cdb8f5604cb3fafe244ef5f2","6b413beb61e46241481f556bb5cdb69c","a0c4ddf9c6f95d7046be8a2e0f875935","ca9290709843584aecbd6564fb978bd6","cf204319f7397a6a31ecf76c9531a549","b8b7a10dcc0dad157191620b5d4e5312","2fdf9f3a25e039a41e743e19550d4040","aa5e8268e741346c76ebfd1f27941a14","e56555162c559a55021b879147b0791","9ad4a2dfd4cb49ef55f2acd320659b83","15c525b74b7251cfa1f7c471975f3f95","c8bf238641621212901517570e96fae","4f11abdb96be36e3806bada5b8b2b8f8","9ea3aaaeb15a074cd617ee1dfdda2c26","e34d6387d3ab063b0d926ac1fca8c4c4","2556a9e1d5e9874171f51620e5c5e09a)","8fc42ee971ab296f921bb05633f6b4a6","a9dcaf1c709f96bc125c8d1262bac4b","d2a795af12e937eb8a89d470a96f15a5","047fbbb380cbf9cd263c482b70ddb26f","d87a3651e5259b79fe0e9bbf67680bd6b6b80ef2d5957584d86f45413194f177","047fbbb380cbf9cd263c482b70ddb26f","047fbbb380cbf9cd263c482b70ddb26f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("cd8834da2cfb0285fa75decf6c67d049","3cd599654aff2e432ae3390d33c64f5e","144ccb808e2d2e1f0119ea2a8f7490bc","2b0338c9f3f46955cfd2dc97c02bd554","5a2845ee84fe5ed2eb987bd684dbeae5c524eb3cdfa918e32c88add63ba69fad","ea47d88d73fecb1fad1e737f1b373d7","97e16c0b770dbbe4fa94cebac92082b7","0f9b541156c0825ab309af9007803b169a30dcd58d8329955c4eb047c5f21f2e","ea47d88d73fecb1fad1e737f1b373d7f","ea47d88d73fecb1fad1e737f1b373d7f","a236cb7f2b0e34619039788de7f7760b","bb5d5aa07fa2c8e9874c117c8fa51d6","da305627acf63792acb02afaf83d94d1","06124da5b4d6ef31dbfd7a6094fc52a6","36ff9ec87c458d6d76b2afbd5120dfae","2f14b3d5ab01568e2707925783f8eafe","4a5de4784a6005aa8a19fb0889f1947a","2a843511cdb8f5604cb3fafe244ef5f2","6b413beb61e46241481f556bb5cdb69c","a0c4ddf9c6f95d7046be8a2e0f875935","ca9290709843584aecbd6564fb978bd6","cf204319f7397a6a31ecf76c9531a549","b8b7a10dcc0dad157191620b5d4e5312","2fdf9f3a25e039a41e743e19550d4040","aa5e8268e741346c76ebfd1f27941a14","e56555162c559a55021b879147b0791","9ad4a2dfd4cb49ef55f2acd320659b83","15c525b74b7251cfa1f7c471975f3f95","c8bf238641621212901517570e96fae","4f11abdb96be36e3806bada5b8b2b8f8","9ea3aaaeb15a074cd617ee1dfdda2c26","e34d6387d3ab063b0d926ac1fca8c4c4","2556a9e1d5e9874171f51620e5c5e09a)","8fc42ee971ab296f921bb05633f6b4a6","a9dcaf1c709f96bc125c8d1262bac4b","d2a795af12e937eb8a89d470a96f15a5","047fbbb380cbf9cd263c482b70ddb26f","d87a3651e5259b79fe0e9bbf67680bd6b6b80ef2d5957584d86f45413194f177","047fbbb380cbf9cd263c482b70ddb26f","047fbbb380cbf9cd263c482b70ddb26f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("cd8834da2cfb0285fa75decf6c67d049","3cd599654aff2e432ae3390d33c64f5e","144ccb808e2d2e1f0119ea2a8f7490bc","2b0338c9f3f46955cfd2dc97c02bd554","5a2845ee84fe5ed2eb987bd684dbeae5c524eb3cdfa918e32c88add63ba69fad","ea47d88d73fecb1fad1e737f1b373d7","97e16c0b770dbbe4fa94cebac92082b7","0f9b541156c0825ab309af9007803b169a30dcd58d8329955c4eb047c5f21f2e","ea47d88d73fecb1fad1e737f1b373d7f","ea47d88d73fecb1fad1e737f1b373d7f","a236cb7f2b0e34619039788de7f7760b","bb5d5aa07fa2c8e9874c117c8fa51d6","da305627acf63792acb02afaf83d94d1","06124da5b4d6ef31dbfd7a6094fc52a6","36ff9ec87c458d6d76b2afbd5120dfae","2f14b3d5ab01568e2707925783f8eafe","4a5de4784a6005aa8a19fb0889f1947a","2a843511cdb8f5604cb3fafe244ef5f2","6b413beb61e46241481f556bb5cdb69c","a0c4ddf9c6f95d7046be8a2e0f875935","ca9290709843584aecbd6564fb978bd6","cf204319f7397a6a31ecf76c9531a549","b8b7a10dcc0dad157191620b5d4e5312","2fdf9f3a25e039a41e743e19550d4040","aa5e8268e741346c76ebfd1f27941a14","e56555162c559a55021b879147b0791","9ad4a2dfd4cb49ef55f2acd320659b83","15c525b74b7251cfa1f7c471975f3f95","c8bf238641621212901517570e96fae","4f11abdb96be36e3806bada5b8b2b8f8","9ea3aaaeb15a074cd617ee1dfdda2c26","e34d6387d3ab063b0d926ac1fca8c4c4","2556a9e1d5e9874171f51620e5c5e09a)","8fc42ee971ab296f921bb05633f6b4a6","a9dcaf1c709f96bc125c8d1262bac4b","d2a795af12e937eb8a89d470a96f15a5","047fbbb380cbf9cd263c482b70ddb26f","d87a3651e5259b79fe0e9bbf67680bd6b6b80ef2d5957584d86f45413194f177","047fbbb380cbf9cd263c482b70ddb26f","047fbbb380cbf9cd263c482b70ddb26f")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("cd8834da2cfb0285fa75decf6c67d049","3cd599654aff2e432ae3390d33c64f5e","144ccb808e2d2e1f0119ea2a8f7490bc","2b0338c9f3f46955cfd2dc97c02bd554","5a2845ee84fe5ed2eb987bd684dbeae5c524eb3cdfa918e32c88add63ba69fad","ea47d88d73fecb1fad1e737f1b373d7","97e16c0b770dbbe4fa94cebac92082b7","0f9b541156c0825ab309af9007803b169a30dcd58d8329955c4eb047c5f21f2e","ea47d88d73fecb1fad1e737f1b373d7f","ea47d88d73fecb1fad1e737f1b373d7f","a236cb7f2b0e34619039788de7f7760b","bb5d5aa07fa2c8e9874c117c8fa51d6","da305627acf63792acb02afaf83d94d1","06124da5b4d6ef31dbfd7a6094fc52a6","36ff9ec87c458d6d76b2afbd5120dfae","2f14b3d5ab01568e2707925783f8eafe","4a5de4784a6005aa8a19fb0889f1947a","2a843511cdb8f5604cb3fafe244ef5f2","6b413beb61e46241481f556bb5cdb69c","a0c4ddf9c6f95d7046be8a2e0f875935","ca9290709843584aecbd6564fb978bd6","cf204319f7397a6a31ecf76c9531a549","b8b7a10dcc0dad157191620b5d4e5312","2fdf9f3a25e039a41e743e19550d4040","aa5e8268e741346c76ebfd1f27941a14","e56555162c559a55021b879147b0791","9ad4a2dfd4cb49ef55f2acd320659b83","15c525b74b7251cfa1f7c471975f3f95","c8bf238641621212901517570e96fae","4f11abdb96be36e3806bada5b8b2b8f8","9ea3aaaeb15a074cd617ee1dfdda2c26","e34d6387d3ab063b0d926ac1fca8c4c4","2556a9e1d5e9874171f51620e5c5e09a)","8fc42ee971ab296f921bb05633f6b4a6","a9dcaf1c709f96bc125c8d1262bac4b","d2a795af12e937eb8a89d470a96f15a5","047fbbb380cbf9cd263c482b70ddb26f","d87a3651e5259b79fe0e9bbf67680bd6b6b80ef2d5957584d86f45413194f177","047fbbb380cbf9cd263c482b70ddb26f","047fbbb380cbf9cd263c482b70ddb26f")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("cd8834da2cfb0285fa75decf6c67d049","3cd599654aff2e432ae3390d33c64f5e","144ccb808e2d2e1f0119ea2a8f7490bc","2b0338c9f3f46955cfd2dc97c02bd554","5a2845ee84fe5ed2eb987bd684dbeae5c524eb3cdfa918e32c88add63ba69fad","ea47d88d73fecb1fad1e737f1b373d7","97e16c0b770dbbe4fa94cebac92082b7","0f9b541156c0825ab309af9007803b169a30dcd58d8329955c4eb047c5f21f2e","ea47d88d73fecb1fad1e737f1b373d7f","ea47d88d73fecb1fad1e737f1b373d7f","a236cb7f2b0e34619039788de7f7760b","bb5d5aa07fa2c8e9874c117c8fa51d6","da305627acf63792acb02afaf83d94d1","06124da5b4d6ef31dbfd7a6094fc52a6","36ff9ec87c458d6d76b2afbd5120dfae","2f14b3d5ab01568e2707925783f8eafe","4a5de4784a6005aa8a19fb0889f1947a","2a843511cdb8f5604cb3fafe244ef5f2","6b413beb61e46241481f556bb5cdb69c","a0c4ddf9c6f95d7046be8a2e0f875935","ca9290709843584aecbd6564fb978bd6","cf204319f7397a6a31ecf76c9531a549","b8b7a10dcc0dad157191620b5d4e5312","2fdf9f3a25e039a41e743e19550d4040","aa5e8268e741346c76ebfd1f27941a14","e56555162c559a55021b879147b0791","9ad4a2dfd4cb49ef55f2acd320659b83","15c525b74b7251cfa1f7c471975f3f95","c8bf238641621212901517570e96fae","4f11abdb96be36e3806bada5b8b2b8f8","9ea3aaaeb15a074cd617ee1dfdda2c26","e34d6387d3ab063b0d926ac1fca8c4c4","2556a9e1d5e9874171f51620e5c5e09a)","8fc42ee971ab296f921bb05633f6b4a6","a9dcaf1c709f96bc125c8d1262bac4b","d2a795af12e937eb8a89d470a96f15a5","047fbbb380cbf9cd263c482b70ddb26f","d87a3651e5259b79fe0e9bbf67680bd6b6b80ef2d5957584d86f45413194f177","047fbbb380cbf9cd263c482b70ddb26f","047fbbb380cbf9cd263c482b70ddb26f")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("cd8834da2cfb0285fa75decf6c67d049","3cd599654aff2e432ae3390d33c64f5e","144ccb808e2d2e1f0119ea2a8f7490bc","2b0338c9f3f46955cfd2dc97c02bd554","5a2845ee84fe5ed2eb987bd684dbeae5c524eb3cdfa918e32c88add63ba69fad","ea47d88d73fecb1fad1e737f1b373d7","97e16c0b770dbbe4fa94cebac92082b7","0f9b541156c0825ab309af9007803b169a30dcd58d8329955c4eb047c5f21f2e","ea47d88d73fecb1fad1e737f1b373d7f","ea47d88d73fecb1fad1e737f1b373d7f","a236cb7f2b0e34619039788de7f7760b","bb5d5aa07fa2c8e9874c117c8fa51d6","da305627acf63792acb02afaf83d94d1","06124da5b4d6ef31dbfd7a6094fc52a6","36ff9ec87c458d6d76b2afbd5120dfae","2f14b3d5ab01568e2707925783f8eafe","4a5de4784a6005aa8a19fb0889f1947a","2a843511cdb8f5604cb3fafe244ef5f2","6b413beb61e46241481f556bb5cdb69c","a0c4ddf9c6f95d7046be8a2e0f875935","ca9290709843584aecbd6564fb978bd6","cf204319f7397a6a31ecf76c9531a549","b8b7a10dcc0dad157191620b5d4e5312","2fdf9f3a25e039a41e743e19550d4040","aa5e8268e741346c76ebfd1f27941a14","e56555162c559a55021b879147b0791","9ad4a2dfd4cb49ef55f2acd320659b83","15c525b74b7251cfa1f7c471975f3f95","c8bf238641621212901517570e96fae","4f11abdb96be36e3806bada5b8b2b8f8","9ea3aaaeb15a074cd617ee1dfdda2c26","e34d6387d3ab063b0d926ac1fca8c4c4","2556a9e1d5e9874171f51620e5c5e09a)","8fc42ee971ab296f921bb05633f6b4a6","a9dcaf1c709f96bc125c8d1262bac4b","d2a795af12e937eb8a89d470a96f15a5","047fbbb380cbf9cd263c482b70ddb26f","d87a3651e5259b79fe0e9bbf67680bd6b6b80ef2d5957584d86f45413194f177","047fbbb380cbf9cd263c482b70ddb26f","047fbbb380cbf9cd263c482b70ddb26f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("cd8834da2cfb0285fa75decf6c67d049","3cd599654aff2e432ae3390d33c64f5e","144ccb808e2d2e1f0119ea2a8f7490bc","2b0338c9f3f46955cfd2dc97c02bd554","5a2845ee84fe5ed2eb987bd684dbeae5c524eb3cdfa918e32c88add63ba69fad","ea47d88d73fecb1fad1e737f1b373d7","97e16c0b770dbbe4fa94cebac92082b7","0f9b541156c0825ab309af9007803b169a30dcd58d8329955c4eb047c5f21f2e","ea47d88d73fecb1fad1e737f1b373d7f","ea47d88d73fecb1fad1e737f1b373d7f","a236cb7f2b0e34619039788de7f7760b","bb5d5aa07fa2c8e9874c117c8fa51d6","da305627acf63792acb02afaf83d94d1","06124da5b4d6ef31dbfd7a6094fc52a6","36ff9ec87c458d6d76b2afbd5120dfae","2f14b3d5ab01568e2707925783f8eafe","4a5de4784a6005aa8a19fb0889f1947a","2a843511cdb8f5604cb3fafe244ef5f2","6b413beb61e46241481f556bb5cdb69c","a0c4ddf9c6f95d7046be8a2e0f875935","ca9290709843584aecbd6564fb978bd6","cf204319f7397a6a31ecf76c9531a549","b8b7a10dcc0dad157191620b5d4e5312","2fdf9f3a25e039a41e743e19550d4040","aa5e8268e741346c76ebfd1f27941a14","e56555162c559a55021b879147b0791","9ad4a2dfd4cb49ef55f2acd320659b83","15c525b74b7251cfa1f7c471975f3f95","c8bf238641621212901517570e96fae","4f11abdb96be36e3806bada5b8b2b8f8","9ea3aaaeb15a074cd617ee1dfdda2c26","e34d6387d3ab063b0d926ac1fca8c4c4","2556a9e1d5e9874171f51620e5c5e09a)","8fc42ee971ab296f921bb05633f6b4a6","a9dcaf1c709f96bc125c8d1262bac4b","d2a795af12e937eb8a89d470a96f15a5","047fbbb380cbf9cd263c482b70ddb26f","d87a3651e5259b79fe0e9bbf67680bd6b6b80ef2d5957584d86f45413194f177","047fbbb380cbf9cd263c482b70ddb26f","047fbbb380cbf9cd263c482b70ddb26f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("cd8834da2cfb0285fa75decf6c67d049","3cd599654aff2e432ae3390d33c64f5e","144ccb808e2d2e1f0119ea2a8f7490bc","2b0338c9f3f46955cfd2dc97c02bd554","5a2845ee84fe5ed2eb987bd684dbeae5c524eb3cdfa918e32c88add63ba69fad","ea47d88d73fecb1fad1e737f1b373d7","97e16c0b770dbbe4fa94cebac92082b7","0f9b541156c0825ab309af9007803b169a30dcd58d8329955c4eb047c5f21f2e","ea47d88d73fecb1fad1e737f1b373d7f","ea47d88d73fecb1fad1e737f1b373d7f","a236cb7f2b0e34619039788de7f7760b","bb5d5aa07fa2c8e9874c117c8fa51d6","da305627acf63792acb02afaf83d94d1","06124da5b4d6ef31dbfd7a6094fc52a6","36ff9ec87c458d6d76b2afbd5120dfae","2f14b3d5ab01568e2707925783f8eafe","4a5de4784a6005aa8a19fb0889f1947a","2a843511cdb8f5604cb3fafe244ef5f2","6b413beb61e46241481f556bb5cdb69c","a0c4ddf9c6f95d7046be8a2e0f875935","ca9290709843584aecbd6564fb978bd6","cf204319f7397a6a31ecf76c9531a549","b8b7a10dcc0dad157191620b5d4e5312","2fdf9f3a25e039a41e743e19550d4040","aa5e8268e741346c76ebfd1f27941a14","e56555162c559a55021b879147b0791","9ad4a2dfd4cb49ef55f2acd320659b83","15c525b74b7251cfa1f7c471975f3f95","c8bf238641621212901517570e96fae","4f11abdb96be36e3806bada5b8b2b8f8","9ea3aaaeb15a074cd617ee1dfdda2c26","e34d6387d3ab063b0d926ac1fca8c4c4","2556a9e1d5e9874171f51620e5c5e09a)","8fc42ee971ab296f921bb05633f6b4a6","a9dcaf1c709f96bc125c8d1262bac4b","d2a795af12e937eb8a89d470a96f15a5","047fbbb380cbf9cd263c482b70ddb26f","d87a3651e5259b79fe0e9bbf67680bd6b6b80ef2d5957584d86f45413194f177","047fbbb380cbf9cd263c482b70ddb26f","047fbbb380cbf9cd263c482b70ddb26f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("cd8834da2cfb0285fa75decf6c67d049","3cd599654aff2e432ae3390d33c64f5e","144ccb808e2d2e1f0119ea2a8f7490bc","2b0338c9f3f46955cfd2dc97c02bd554","5a2845ee84fe5ed2eb987bd684dbeae5c524eb3cdfa918e32c88add63ba69fad","ea47d88d73fecb1fad1e737f1b373d7","97e16c0b770dbbe4fa94cebac92082b7","0f9b541156c0825ab309af9007803b169a30dcd58d8329955c4eb047c5f21f2e","ea47d88d73fecb1fad1e737f1b373d7f","ea47d88d73fecb1fad1e737f1b373d7f","a236cb7f2b0e34619039788de7f7760b","bb5d5aa07fa2c8e9874c117c8fa51d6","da305627acf63792acb02afaf83d94d1","06124da5b4d6ef31dbfd7a6094fc52a6","36ff9ec87c458d6d76b2afbd5120dfae","2f14b3d5ab01568e2707925783f8eafe","4a5de4784a6005aa8a19fb0889f1947a","2a843511cdb8f5604cb3fafe244ef5f2","6b413beb61e46241481f556bb5cdb69c","a0c4ddf9c6f95d7046be8a2e0f875935","ca9290709843584aecbd6564fb978bd6","cf204319f7397a6a31ecf76c9531a549","b8b7a10dcc0dad157191620b5d4e5312","2fdf9f3a25e039a41e743e19550d4040","aa5e8268e741346c76ebfd1f27941a14","e56555162c559a55021b879147b0791","9ad4a2dfd4cb49ef55f2acd320659b83","15c525b74b7251cfa1f7c471975f3f95","c8bf238641621212901517570e96fae","4f11abdb96be36e3806bada5b8b2b8f8","9ea3aaaeb15a074cd617ee1dfdda2c26","e34d6387d3ab063b0d926ac1fca8c4c4","2556a9e1d5e9874171f51620e5c5e09a)","8fc42ee971ab296f921bb05633f6b4a6","a9dcaf1c709f96bc125c8d1262bac4b","d2a795af12e937eb8a89d470a96f15a5","047fbbb380cbf9cd263c482b70ddb26f","d87a3651e5259b79fe0e9bbf67680bd6b6b80ef2d5957584d86f45413194f177","047fbbb380cbf9cd263c482b70ddb26f","047fbbb380cbf9cd263c482b70ddb26f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("cd8834da2cfb0285fa75decf6c67d049","3cd599654aff2e432ae3390d33c64f5e","144ccb808e2d2e1f0119ea2a8f7490bc","2b0338c9f3f46955cfd2dc97c02bd554","5a2845ee84fe5ed2eb987bd684dbeae5c524eb3cdfa918e32c88add63ba69fad","ea47d88d73fecb1fad1e737f1b373d7","97e16c0b770dbbe4fa94cebac92082b7","0f9b541156c0825ab309af9007803b169a30dcd58d8329955c4eb047c5f21f2e","ea47d88d73fecb1fad1e737f1b373d7f","ea47d88d73fecb1fad1e737f1b373d7f","a236cb7f2b0e34619039788de7f7760b","bb5d5aa07fa2c8e9874c117c8fa51d6","da305627acf63792acb02afaf83d94d1","06124da5b4d6ef31dbfd7a6094fc52a6","36ff9ec87c458d6d76b2afbd5120dfae","2f14b3d5ab01568e2707925783f8eafe","4a5de4784a6005aa8a19fb0889f1947a","2a843511cdb8f5604cb3fafe244ef5f2","6b413beb61e46241481f556bb5cdb69c","a0c4ddf9c6f95d7046be8a2e0f875935","ca9290709843584aecbd6564fb978bd6","cf204319f7397a6a31ecf76c9531a549","b8b7a10dcc0dad157191620b5d4e5312","2fdf9f3a25e039a41e743e19550d4040","aa5e8268e741346c76ebfd1f27941a14","e56555162c559a55021b879147b0791","9ad4a2dfd4cb49ef55f2acd320659b83","15c525b74b7251cfa1f7c471975f3f95","c8bf238641621212901517570e96fae","4f11abdb96be36e3806bada5b8b2b8f8","9ea3aaaeb15a074cd617ee1dfdda2c26","e34d6387d3ab063b0d926ac1fca8c4c4","2556a9e1d5e9874171f51620e5c5e09a)","8fc42ee971ab296f921bb05633f6b4a6","a9dcaf1c709f96bc125c8d1262bac4b","d2a795af12e937eb8a89d470a96f15a5","047fbbb380cbf9cd263c482b70ddb26f","d87a3651e5259b79fe0e9bbf67680bd6b6b80ef2d5957584d86f45413194f177","047fbbb380cbf9cd263c482b70ddb26f","047fbbb380cbf9cd263c482b70ddb26f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("cd8834da2cfb0285fa75decf6c67d049","3cd599654aff2e432ae3390d33c64f5e","144ccb808e2d2e1f0119ea2a8f7490bc","2b0338c9f3f46955cfd2dc97c02bd554","5a2845ee84fe5ed2eb987bd684dbeae5c524eb3cdfa918e32c88add63ba69fad","ea47d88d73fecb1fad1e737f1b373d7","97e16c0b770dbbe4fa94cebac92082b7","0f9b541156c0825ab309af9007803b169a30dcd58d8329955c4eb047c5f21f2e","ea47d88d73fecb1fad1e737f1b373d7f","ea47d88d73fecb1fad1e737f1b373d7f","a236cb7f2b0e34619039788de7f7760b","bb5d5aa07fa2c8e9874c117c8fa51d6","da305627acf63792acb02afaf83d94d1","06124da5b4d6ef31dbfd7a6094fc52a6","36ff9ec87c458d6d76b2afbd5120dfae","2f14b3d5ab01568e2707925783f8eafe","4a5de4784a6005aa8a19fb0889f1947a","2a843511cdb8f5604cb3fafe244ef5f2","6b413beb61e46241481f556bb5cdb69c","a0c4ddf9c6f95d7046be8a2e0f875935","ca9290709843584aecbd6564fb978bd6","cf204319f7397a6a31ecf76c9531a549","b8b7a10dcc0dad157191620b5d4e5312","2fdf9f3a25e039a41e743e19550d4040","aa5e8268e741346c76ebfd1f27941a14","e56555162c559a55021b879147b0791","9ad4a2dfd4cb49ef55f2acd320659b83","15c525b74b7251cfa1f7c471975f3f95","c8bf238641621212901517570e96fae","4f11abdb96be36e3806bada5b8b2b8f8","9ea3aaaeb15a074cd617ee1dfdda2c26","e34d6387d3ab063b0d926ac1fca8c4c4","2556a9e1d5e9874171f51620e5c5e09a)","8fc42ee971ab296f921bb05633f6b4a6","a9dcaf1c709f96bc125c8d1262bac4b","d2a795af12e937eb8a89d470a96f15a5","047fbbb380cbf9cd263c482b70ddb26f","d87a3651e5259b79fe0e9bbf67680bd6b6b80ef2d5957584d86f45413194f177","047fbbb380cbf9cd263c482b70ddb26f","047fbbb380cbf9cd263c482b70ddb26f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("cd8834da2cfb0285fa75decf6c67d049","3cd599654aff2e432ae3390d33c64f5e","144ccb808e2d2e1f0119ea2a8f7490bc","2b0338c9f3f46955cfd2dc97c02bd554","5a2845ee84fe5ed2eb987bd684dbeae5c524eb3cdfa918e32c88add63ba69fad","ea47d88d73fecb1fad1e737f1b373d7","97e16c0b770dbbe4fa94cebac92082b7","0f9b541156c0825ab309af9007803b169a30dcd58d8329955c4eb047c5f21f2e","ea47d88d73fecb1fad1e737f1b373d7f","ea47d88d73fecb1fad1e737f1b373d7f","a236cb7f2b0e34619039788de7f7760b","bb5d5aa07fa2c8e9874c117c8fa51d6","da305627acf63792acb02afaf83d94d1","06124da5b4d6ef31dbfd7a6094fc52a6","36ff9ec87c458d6d76b2afbd5120dfae","2f14b3d5ab01568e2707925783f8eafe","4a5de4784a6005aa8a19fb0889f1947a","2a843511cdb8f5604cb3fafe244ef5f2","6b413beb61e46241481f556bb5cdb69c","a0c4ddf9c6f95d7046be8a2e0f875935","ca9290709843584aecbd6564fb978bd6","cf204319f7397a6a31ecf76c9531a549","b8b7a10dcc0dad157191620b5d4e5312","2fdf9f3a25e039a41e743e19550d4040","aa5e8268e741346c76ebfd1f27941a14","e56555162c559a55021b879147b0791","9ad4a2dfd4cb49ef55f2acd320659b83","15c525b74b7251cfa1f7c471975f3f95","c8bf238641621212901517570e96fae","4f11abdb96be36e3806bada5b8b2b8f8","9ea3aaaeb15a074cd617ee1dfdda2c26","e34d6387d3ab063b0d926ac1fca8c4c4","2556a9e1d5e9874171f51620e5c5e09a)","8fc42ee971ab296f921bb05633f6b4a6","a9dcaf1c709f96bc125c8d1262bac4b","d2a795af12e937eb8a89d470a96f15a5","047fbbb380cbf9cd263c482b70ddb26f","d87a3651e5259b79fe0e9bbf67680bd6b6b80ef2d5957584d86f45413194f177","047fbbb380cbf9cd263c482b70ddb26f","047fbbb380cbf9cd263c482b70ddb26f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("cd8834da2cfb0285fa75decf6c67d049","3cd599654aff2e432ae3390d33c64f5e","144ccb808e2d2e1f0119ea2a8f7490bc","2b0338c9f3f46955cfd2dc97c02bd554","5a2845ee84fe5ed2eb987bd684dbeae5c524eb3cdfa918e32c88add63ba69fad","ea47d88d73fecb1fad1e737f1b373d7","97e16c0b770dbbe4fa94cebac92082b7","0f9b541156c0825ab309af9007803b169a30dcd58d8329955c4eb047c5f21f2e","ea47d88d73fecb1fad1e737f1b373d7f","ea47d88d73fecb1fad1e737f1b373d7f","a236cb7f2b0e34619039788de7f7760b","bb5d5aa07fa2c8e9874c117c8fa51d6","da305627acf63792acb02afaf83d94d1","06124da5b4d6ef31dbfd7a6094fc52a6","36ff9ec87c458d6d76b2afbd5120dfae","2f14b3d5ab01568e2707925783f8eafe","4a5de4784a6005aa8a19fb0889f1947a","2a843511cdb8f5604cb3fafe244ef5f2","6b413beb61e46241481f556bb5cdb69c","a0c4ddf9c6f95d7046be8a2e0f875935","ca9290709843584aecbd6564fb978bd6","cf204319f7397a6a31ecf76c9531a549","b8b7a10dcc0dad157191620b5d4e5312","2fdf9f3a25e039a41e743e19550d4040","aa5e8268e741346c76ebfd1f27941a14","e56555162c559a55021b879147b0791","9ad4a2dfd4cb49ef55f2acd320659b83","15c525b74b7251cfa1f7c471975f3f95","c8bf238641621212901517570e96fae","4f11abdb96be36e3806bada5b8b2b8f8","9ea3aaaeb15a074cd617ee1dfdda2c26","e34d6387d3ab063b0d926ac1fca8c4c4","2556a9e1d5e9874171f51620e5c5e09a)","8fc42ee971ab296f921bb05633f6b4a6","a9dcaf1c709f96bc125c8d1262bac4b","d2a795af12e937eb8a89d470a96f15a5","047fbbb380cbf9cd263c482b70ddb26f","d87a3651e5259b79fe0e9bbf67680bd6b6b80ef2d5957584d86f45413194f177","047fbbb380cbf9cd263c482b70ddb26f","047fbbb380cbf9cd263c482b70ddb26f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("cd8834da2cfb0285fa75decf6c67d049","3cd599654aff2e432ae3390d33c64f5e","144ccb808e2d2e1f0119ea2a8f7490bc","2b0338c9f3f46955cfd2dc97c02bd554","5a2845ee84fe5ed2eb987bd684dbeae5c524eb3cdfa918e32c88add63ba69fad","ea47d88d73fecb1fad1e737f1b373d7","97e16c0b770dbbe4fa94cebac92082b7","0f9b541156c0825ab309af9007803b169a30dcd58d8329955c4eb047c5f21f2e","ea47d88d73fecb1fad1e737f1b373d7f","ea47d88d73fecb1fad1e737f1b373d7f","a236cb7f2b0e34619039788de7f7760b","bb5d5aa07fa2c8e9874c117c8fa51d6","da305627acf63792acb02afaf83d94d1","06124da5b4d6ef31dbfd7a6094fc52a6","36ff9ec87c458d6d76b2afbd5120dfae","2f14b3d5ab01568e2707925783f8eafe","4a5de4784a6005aa8a19fb0889f1947a","2a843511cdb8f5604cb3fafe244ef5f2","6b413beb61e46241481f556bb5cdb69c","a0c4ddf9c6f95d7046be8a2e0f875935","ca9290709843584aecbd6564fb978bd6","cf204319f7397a6a31ecf76c9531a549","b8b7a10dcc0dad157191620b5d4e5312","2fdf9f3a25e039a41e743e19550d4040","aa5e8268e741346c76ebfd1f27941a14","e56555162c559a55021b879147b0791","9ad4a2dfd4cb49ef55f2acd320659b83","15c525b74b7251cfa1f7c471975f3f95","c8bf238641621212901517570e96fae","4f11abdb96be36e3806bada5b8b2b8f8","9ea3aaaeb15a074cd617ee1dfdda2c26","e34d6387d3ab063b0d926ac1fca8c4c4","2556a9e1d5e9874171f51620e5c5e09a)","8fc42ee971ab296f921bb05633f6b4a6","a9dcaf1c709f96bc125c8d1262bac4b","d2a795af12e937eb8a89d470a96f15a5","047fbbb380cbf9cd263c482b70ddb26f","d87a3651e5259b79fe0e9bbf67680bd6b6b80ef2d5957584d86f45413194f177","047fbbb380cbf9cd263c482b70ddb26f","047fbbb380cbf9cd263c482b70ddb26f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("cd8834da2cfb0285fa75decf6c67d049","3cd599654aff2e432ae3390d33c64f5e","144ccb808e2d2e1f0119ea2a8f7490bc","2b0338c9f3f46955cfd2dc97c02bd554","5a2845ee84fe5ed2eb987bd684dbeae5c524eb3cdfa918e32c88add63ba69fad","ea47d88d73fecb1fad1e737f1b373d7","97e16c0b770dbbe4fa94cebac92082b7","0f9b541156c0825ab309af9007803b169a30dcd58d8329955c4eb047c5f21f2e","ea47d88d73fecb1fad1e737f1b373d7f","ea47d88d73fecb1fad1e737f1b373d7f","a236cb7f2b0e34619039788de7f7760b","bb5d5aa07fa2c8e9874c117c8fa51d6","da305627acf63792acb02afaf83d94d1","06124da5b4d6ef31dbfd7a6094fc52a6","36ff9ec87c458d6d76b2afbd5120dfae","2f14b3d5ab01568e2707925783f8eafe","4a5de4784a6005aa8a19fb0889f1947a","2a843511cdb8f5604cb3fafe244ef5f2","6b413beb61e46241481f556bb5cdb69c","a0c4ddf9c6f95d7046be8a2e0f875935","ca9290709843584aecbd6564fb978bd6","cf204319f7397a6a31ecf76c9531a549","b8b7a10dcc0dad157191620b5d4e5312","2fdf9f3a25e039a41e743e19550d4040","aa5e8268e741346c76ebfd1f27941a14","e56555162c559a55021b879147b0791","9ad4a2dfd4cb49ef55f2acd320659b83","15c525b74b7251cfa1f7c471975f3f95","c8bf238641621212901517570e96fae","4f11abdb96be36e3806bada5b8b2b8f8","9ea3aaaeb15a074cd617ee1dfdda2c26","e34d6387d3ab063b0d926ac1fca8c4c4","2556a9e1d5e9874171f51620e5c5e09a)","8fc42ee971ab296f921bb05633f6b4a6","a9dcaf1c709f96bc125c8d1262bac4b","d2a795af12e937eb8a89d470a96f15a5","047fbbb380cbf9cd263c482b70ddb26f","d87a3651e5259b79fe0e9bbf67680bd6b6b80ef2d5957584d86f45413194f177","047fbbb380cbf9cd263c482b70ddb26f","047fbbb380cbf9cd263c482b70ddb26f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("cd8834da2cfb0285fa75decf6c67d049","3cd599654aff2e432ae3390d33c64f5e","144ccb808e2d2e1f0119ea2a8f7490bc","2b0338c9f3f46955cfd2dc97c02bd554","5a2845ee84fe5ed2eb987bd684dbeae5c524eb3cdfa918e32c88add63ba69fad","ea47d88d73fecb1fad1e737f1b373d7","97e16c0b770dbbe4fa94cebac92082b7","0f9b541156c0825ab309af9007803b169a30dcd58d8329955c4eb047c5f21f2e","ea47d88d73fecb1fad1e737f1b373d7f","ea47d88d73fecb1fad1e737f1b373d7f","a236cb7f2b0e34619039788de7f7760b","bb5d5aa07fa2c8e9874c117c8fa51d6","da305627acf63792acb02afaf83d94d1","06124da5b4d6ef31dbfd7a6094fc52a6","36ff9ec87c458d6d76b2afbd5120dfae","2f14b3d5ab01568e2707925783f8eafe","4a5de4784a6005aa8a19fb0889f1947a","2a843511cdb8f5604cb3fafe244ef5f2","6b413beb61e46241481f556bb5cdb69c","a0c4ddf9c6f95d7046be8a2e0f875935","ca9290709843584aecbd6564fb978bd6","cf204319f7397a6a31ecf76c9531a549","b8b7a10dcc0dad157191620b5d4e5312","2fdf9f3a25e039a41e743e19550d4040","aa5e8268e741346c76ebfd1f27941a14","e56555162c559a55021b879147b0791","9ad4a2dfd4cb49ef55f2acd320659b83","15c525b74b7251cfa1f7c471975f3f95","c8bf238641621212901517570e96fae","4f11abdb96be36e3806bada5b8b2b8f8","9ea3aaaeb15a074cd617ee1dfdda2c26","e34d6387d3ab063b0d926ac1fca8c4c4","2556a9e1d5e9874171f51620e5c5e09a)","8fc42ee971ab296f921bb05633f6b4a6","a9dcaf1c709f96bc125c8d1262bac4b","d2a795af12e937eb8a89d470a96f15a5","047fbbb380cbf9cd263c482b70ddb26f","d87a3651e5259b79fe0e9bbf67680bd6b6b80ef2d5957584d86f45413194f177","047fbbb380cbf9cd263c482b70ddb26f","047fbbb380cbf9cd263c482b70ddb26f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("cd8834da2cfb0285fa75decf6c67d049","3cd599654aff2e432ae3390d33c64f5e","144ccb808e2d2e1f0119ea2a8f7490bc","2b0338c9f3f46955cfd2dc97c02bd554","5a2845ee84fe5ed2eb987bd684dbeae5c524eb3cdfa918e32c88add63ba69fad","ea47d88d73fecb1fad1e737f1b373d7","97e16c0b770dbbe4fa94cebac92082b7","0f9b541156c0825ab309af9007803b169a30dcd58d8329955c4eb047c5f21f2e","ea47d88d73fecb1fad1e737f1b373d7f","ea47d88d73fecb1fad1e737f1b373d7f","a236cb7f2b0e34619039788de7f7760b","bb5d5aa07fa2c8e9874c117c8fa51d6","da305627acf63792acb02afaf83d94d1","06124da5b4d6ef31dbfd7a6094fc52a6","36ff9ec87c458d6d76b2afbd5120dfae","2f14b3d5ab01568e2707925783f8eafe","4a5de4784a6005aa8a19fb0889f1947a","2a843511cdb8f5604cb3fafe244ef5f2","6b413beb61e46241481f556bb5cdb69c","a0c4ddf9c6f95d7046be8a2e0f875935","ca9290709843584aecbd6564fb978bd6","cf204319f7397a6a31ecf76c9531a549","b8b7a10dcc0dad157191620b5d4e5312","2fdf9f3a25e039a41e743e19550d4040","aa5e8268e741346c76ebfd1f27941a14","e56555162c559a55021b879147b0791","9ad4a2dfd4cb49ef55f2acd320659b83","15c525b74b7251cfa1f7c471975f3f95","c8bf238641621212901517570e96fae","4f11abdb96be36e3806bada5b8b2b8f8","9ea3aaaeb15a074cd617ee1dfdda2c26","e34d6387d3ab063b0d926ac1fca8c4c4","2556a9e1d5e9874171f51620e5c5e09a)","8fc42ee971ab296f921bb05633f6b4a6","a9dcaf1c709f96bc125c8d1262bac4b","d2a795af12e937eb8a89d470a96f15a5","047fbbb380cbf9cd263c482b70ddb26f","d87a3651e5259b79fe0e9bbf67680bd6b6b80ef2d5957584d86f45413194f177","047fbbb380cbf9cd263c482b70ddb26f","047fbbb380cbf9cd263c482b70ddb26f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("cd8834da2cfb0285fa75decf6c67d049","3cd599654aff2e432ae3390d33c64f5e","144ccb808e2d2e1f0119ea2a8f7490bc","2b0338c9f3f46955cfd2dc97c02bd554","5a2845ee84fe5ed2eb987bd684dbeae5c524eb3cdfa918e32c88add63ba69fad","ea47d88d73fecb1fad1e737f1b373d7","97e16c0b770dbbe4fa94cebac92082b7","0f9b541156c0825ab309af9007803b169a30dcd58d8329955c4eb047c5f21f2e","ea47d88d73fecb1fad1e737f1b373d7f","ea47d88d73fecb1fad1e737f1b373d7f","a236cb7f2b0e34619039788de7f7760b","bb5d5aa07fa2c8e9874c117c8fa51d6","da305627acf63792acb02afaf83d94d1","06124da5b4d6ef31dbfd7a6094fc52a6","36ff9ec87c458d6d76b2afbd5120dfae","2f14b3d5ab01568e2707925783f8eafe","4a5de4784a6005aa8a19fb0889f1947a","2a843511cdb8f5604cb3fafe244ef5f2","6b413beb61e46241481f556bb5cdb69c","a0c4ddf9c6f95d7046be8a2e0f875935","ca9290709843584aecbd6564fb978bd6","cf204319f7397a6a31ecf76c9531a549","b8b7a10dcc0dad157191620b5d4e5312","2fdf9f3a25e039a41e743e19550d4040","aa5e8268e741346c76ebfd1f27941a14","e56555162c559a55021b879147b0791","9ad4a2dfd4cb49ef55f2acd320659b83","15c525b74b7251cfa1f7c471975f3f95","c8bf238641621212901517570e96fae","4f11abdb96be36e3806bada5b8b2b8f8","9ea3aaaeb15a074cd617ee1dfdda2c26","e34d6387d3ab063b0d926ac1fca8c4c4","2556a9e1d5e9874171f51620e5c5e09a)","8fc42ee971ab296f921bb05633f6b4a6","a9dcaf1c709f96bc125c8d1262bac4b","d2a795af12e937eb8a89d470a96f15a5","047fbbb380cbf9cd263c482b70ddb26f","d87a3651e5259b79fe0e9bbf67680bd6b6b80ef2d5957584d86f45413194f177","047fbbb380cbf9cd263c482b70ddb26f","047fbbb380cbf9cd263c482b70ddb26f")
index=activity AND rg_functionality="Endpoint Management Systems" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Endpoint Management Systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Flow" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Web Server" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="DNS / DHCP" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="DNS / DHCP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Endpoint management systems" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Microsoft Windows" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Microsoft Windows" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Microsoft Windows" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Microsoft Windows" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Microsoft Windows" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Services / Applications" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Application Audit" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Authentication / VPN" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Unix / Linux / AIX" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Network Access Control / NAC" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Network Access Control / NAC" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Network Access Control / NAC" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Virtualization / Containers" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Virtualization / Containers" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Virtualization / Containers" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Access / Privileged User" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Access / Privileged User" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Access / Privileged User" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Access / Privileged User" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Access / Privileged User" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Access / Identity Management" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Access / Identity Management" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Access / Identity Management" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Access / Identity Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Access / Identity Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Identity Access Management" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Identity Access Management" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Identity Access Management" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Identity Access Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Identity Access Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Authentication / WiFi" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Application Security Broker" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Source Code Repository" AND ipaddress NOT NULL AND ipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND translatedipaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("111.90.151.182","111.90.151.182","111.90.151.182","111.90.151.182","194.31.98.12","194.31.98.124","45.84.0.1")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Microsoft Windows" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Content Management System" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Network Access Control / NAC" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Virtualization / Containers" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Access / Privileged User" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Access / Identity Management" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Identity Access Management" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Authentication / WiFi" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://194.31.98.124:443/i","http://194.31.98.124/","http://194.31.98.124:443/c","https://forkscenter.fr/BitdefenderWindowsUpdatePackage.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174636830761/one.exe","https://cdn.discordapp.com/attachments/947916997713358890/949948174838165524/dropper.exe","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://nirsoft.me/nEDFzTtoCbUfp9BtSZlaq6ql8v6yYb/avp/amznussraps/","https://nirsoft.me/s/2MYmbwpSJLZRAtXRgNTAUjJSH6SSoicLPIrQl/field-keywords/","https://forkscenter.fr/Sdghrt_umrj6/wisw.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://cdn.discordapp.com/attachments/947916997713358890/949978571680673802/cesdf.exe","https://45.84.0.116/i","http://45.84.0.116:443/m","http://45.84.0.116:443/p","http://45.84.0.116:443/m","http://45.84.0.116:443/p")
