index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("1578ad8f244ae82c36e3feadeb7d66e3","8f021266830397dac3e34f1b3bdde60c","05c97434f3c6970103a3ceda97572481","529951790a4a6da8743af98a24c4088e","a141acc27f79584575a7d2af634be917","8550ebb8f4f5b377df3a3492dbc08f63","511b48b4471e8ab08a4ec6495157f62a","0b3b4b02ed9d4844ec53a3f2a7064432","8e0486fb2291090d4411f58aa030dd23","90f31a31dee14f1efc80e7f121a44763","e23b0bab2ebcff10bc39f95cb92e6d9f","28f7a338c703cf695e776108a7dc3f00","5ccb4a79accca8b6fdc364042705b1a9","7789b3c473654e3251b102083d49128a","50920220980a2c188fb88ba770a72ded","452aeffb5c3c564988b0b7686a1433e9","2ef96ecfe9a2d05bfc24a936a97e66f1","fb0dcc61efe76eccef9b7fa20514a1b9","ac34f72d560a282b919da74e2f5ef8e1","3144517e723720c79c5f975a629cd2d7","f1006f3968f9edf76090e34702e647e6","03c3f6369b934cf86576c394e9172359","758f815f3775e1b063eba3ab33479a9f","0d34d8571c6998796a2edb212a8037f5","6953629af9858647b65c47ae738334db","f94e8d62921d078c58860ffc2374a357","50f2b28aba4d4cb47544bcc98980a63e","9ec150a4c04da6a1087a3cd36086fde3","79a9f2ae5af2b370eea6c7fc6681e3ef","3b94bf347edcc8f137741989de3eb882","485edc4695212c4e97cf2e841661151c","a48f8e50e74b3792eeaffc6d25ca0080","dc2cbd65ca5411b8a9326338c74c7758","940d63f67b70b37e7ee662b851ae389b","05748b4e8730bb2a705fe1e2e00c5d77","8f0f4e736d83e296b55802c2337f341b","01144efd1dc06a0b9d3ea8a1e632dc26","cd9ba1e78dab227e2fda2cf952adcab4")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("1578ad8f244ae82c36e3feadeb7d66e3","8f021266830397dac3e34f1b3bdde60c","05c97434f3c6970103a3ceda97572481","529951790a4a6da8743af98a24c4088e","a141acc27f79584575a7d2af634be917","8550ebb8f4f5b377df3a3492dbc08f63","511b48b4471e8ab08a4ec6495157f62a","0b3b4b02ed9d4844ec53a3f2a7064432","8e0486fb2291090d4411f58aa030dd23","90f31a31dee14f1efc80e7f121a44763","e23b0bab2ebcff10bc39f95cb92e6d9f","28f7a338c703cf695e776108a7dc3f00","5ccb4a79accca8b6fdc364042705b1a9","7789b3c473654e3251b102083d49128a","50920220980a2c188fb88ba770a72ded","452aeffb5c3c564988b0b7686a1433e9","2ef96ecfe9a2d05bfc24a936a97e66f1","fb0dcc61efe76eccef9b7fa20514a1b9","ac34f72d560a282b919da74e2f5ef8e1","3144517e723720c79c5f975a629cd2d7","f1006f3968f9edf76090e34702e647e6","03c3f6369b934cf86576c394e9172359","758f815f3775e1b063eba3ab33479a9f","0d34d8571c6998796a2edb212a8037f5","6953629af9858647b65c47ae738334db","f94e8d62921d078c58860ffc2374a357","50f2b28aba4d4cb47544bcc98980a63e","9ec150a4c04da6a1087a3cd36086fde3","79a9f2ae5af2b370eea6c7fc6681e3ef","3b94bf347edcc8f137741989de3eb882","485edc4695212c4e97cf2e841661151c","a48f8e50e74b3792eeaffc6d25ca0080","dc2cbd65ca5411b8a9326338c74c7758","940d63f67b70b37e7ee662b851ae389b","05748b4e8730bb2a705fe1e2e00c5d77","8f0f4e736d83e296b55802c2337f341b","01144efd1dc06a0b9d3ea8a1e632dc26","cd9ba1e78dab227e2fda2cf952adcab4")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("1578ad8f244ae82c36e3feadeb7d66e3","8f021266830397dac3e34f1b3bdde60c","05c97434f3c6970103a3ceda97572481","529951790a4a6da8743af98a24c4088e","a141acc27f79584575a7d2af634be917","8550ebb8f4f5b377df3a3492dbc08f63","511b48b4471e8ab08a4ec6495157f62a","0b3b4b02ed9d4844ec53a3f2a7064432","8e0486fb2291090d4411f58aa030dd23","90f31a31dee14f1efc80e7f121a44763","e23b0bab2ebcff10bc39f95cb92e6d9f","28f7a338c703cf695e776108a7dc3f00","5ccb4a79accca8b6fdc364042705b1a9","7789b3c473654e3251b102083d49128a","50920220980a2c188fb88ba770a72ded","452aeffb5c3c564988b0b7686a1433e9","2ef96ecfe9a2d05bfc24a936a97e66f1","fb0dcc61efe76eccef9b7fa20514a1b9","ac34f72d560a282b919da74e2f5ef8e1","3144517e723720c79c5f975a629cd2d7","f1006f3968f9edf76090e34702e647e6","03c3f6369b934cf86576c394e9172359","758f815f3775e1b063eba3ab33479a9f","0d34d8571c6998796a2edb212a8037f5","6953629af9858647b65c47ae738334db","f94e8d62921d078c58860ffc2374a357","50f2b28aba4d4cb47544bcc98980a63e","9ec150a4c04da6a1087a3cd36086fde3","79a9f2ae5af2b370eea6c7fc6681e3ef","3b94bf347edcc8f137741989de3eb882","485edc4695212c4e97cf2e841661151c","a48f8e50e74b3792eeaffc6d25ca0080","dc2cbd65ca5411b8a9326338c74c7758","940d63f67b70b37e7ee662b851ae389b","05748b4e8730bb2a705fe1e2e00c5d77","8f0f4e736d83e296b55802c2337f341b","01144efd1dc06a0b9d3ea8a1e632dc26","cd9ba1e78dab227e2fda2cf952adcab4")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("1578ad8f244ae82c36e3feadeb7d66e3","8f021266830397dac3e34f1b3bdde60c","05c97434f3c6970103a3ceda97572481","529951790a4a6da8743af98a24c4088e","a141acc27f79584575a7d2af634be917","8550ebb8f4f5b377df3a3492dbc08f63","511b48b4471e8ab08a4ec6495157f62a","0b3b4b02ed9d4844ec53a3f2a7064432","8e0486fb2291090d4411f58aa030dd23","90f31a31dee14f1efc80e7f121a44763","e23b0bab2ebcff10bc39f95cb92e6d9f","28f7a338c703cf695e776108a7dc3f00","5ccb4a79accca8b6fdc364042705b1a9","7789b3c473654e3251b102083d49128a","50920220980a2c188fb88ba770a72ded","452aeffb5c3c564988b0b7686a1433e9","2ef96ecfe9a2d05bfc24a936a97e66f1","fb0dcc61efe76eccef9b7fa20514a1b9","ac34f72d560a282b919da74e2f5ef8e1","3144517e723720c79c5f975a629cd2d7","f1006f3968f9edf76090e34702e647e6","03c3f6369b934cf86576c394e9172359","758f815f3775e1b063eba3ab33479a9f","0d34d8571c6998796a2edb212a8037f5","6953629af9858647b65c47ae738334db","f94e8d62921d078c58860ffc2374a357","50f2b28aba4d4cb47544bcc98980a63e","9ec150a4c04da6a1087a3cd36086fde3","79a9f2ae5af2b370eea6c7fc6681e3ef","3b94bf347edcc8f137741989de3eb882","485edc4695212c4e97cf2e841661151c","a48f8e50e74b3792eeaffc6d25ca0080","dc2cbd65ca5411b8a9326338c74c7758","940d63f67b70b37e7ee662b851ae389b","05748b4e8730bb2a705fe1e2e00c5d77","8f0f4e736d83e296b55802c2337f341b","01144efd1dc06a0b9d3ea8a1e632dc26","cd9ba1e78dab227e2fda2cf952adcab4")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("1578ad8f244ae82c36e3feadeb7d66e3","8f021266830397dac3e34f1b3bdde60c","05c97434f3c6970103a3ceda97572481","529951790a4a6da8743af98a24c4088e","a141acc27f79584575a7d2af634be917","8550ebb8f4f5b377df3a3492dbc08f63","511b48b4471e8ab08a4ec6495157f62a","0b3b4b02ed9d4844ec53a3f2a7064432","8e0486fb2291090d4411f58aa030dd23","90f31a31dee14f1efc80e7f121a44763","e23b0bab2ebcff10bc39f95cb92e6d9f","28f7a338c703cf695e776108a7dc3f00","5ccb4a79accca8b6fdc364042705b1a9","7789b3c473654e3251b102083d49128a","50920220980a2c188fb88ba770a72ded","452aeffb5c3c564988b0b7686a1433e9","2ef96ecfe9a2d05bfc24a936a97e66f1","fb0dcc61efe76eccef9b7fa20514a1b9","ac34f72d560a282b919da74e2f5ef8e1","3144517e723720c79c5f975a629cd2d7","f1006f3968f9edf76090e34702e647e6","03c3f6369b934cf86576c394e9172359","758f815f3775e1b063eba3ab33479a9f","0d34d8571c6998796a2edb212a8037f5","6953629af9858647b65c47ae738334db","f94e8d62921d078c58860ffc2374a357","50f2b28aba4d4cb47544bcc98980a63e","9ec150a4c04da6a1087a3cd36086fde3","79a9f2ae5af2b370eea6c7fc6681e3ef","3b94bf347edcc8f137741989de3eb882","485edc4695212c4e97cf2e841661151c","a48f8e50e74b3792eeaffc6d25ca0080","dc2cbd65ca5411b8a9326338c74c7758","940d63f67b70b37e7ee662b851ae389b","05748b4e8730bb2a705fe1e2e00c5d77","8f0f4e736d83e296b55802c2337f341b","01144efd1dc06a0b9d3ea8a1e632dc26","cd9ba1e78dab227e2fda2cf952adcab4")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("1578ad8f244ae82c36e3feadeb7d66e3","8f021266830397dac3e34f1b3bdde60c","05c97434f3c6970103a3ceda97572481","529951790a4a6da8743af98a24c4088e","a141acc27f79584575a7d2af634be917","8550ebb8f4f5b377df3a3492dbc08f63","511b48b4471e8ab08a4ec6495157f62a","0b3b4b02ed9d4844ec53a3f2a7064432","8e0486fb2291090d4411f58aa030dd23","90f31a31dee14f1efc80e7f121a44763","e23b0bab2ebcff10bc39f95cb92e6d9f","28f7a338c703cf695e776108a7dc3f00","5ccb4a79accca8b6fdc364042705b1a9","7789b3c473654e3251b102083d49128a","50920220980a2c188fb88ba770a72ded","452aeffb5c3c564988b0b7686a1433e9","2ef96ecfe9a2d05bfc24a936a97e66f1","fb0dcc61efe76eccef9b7fa20514a1b9","ac34f72d560a282b919da74e2f5ef8e1","3144517e723720c79c5f975a629cd2d7","f1006f3968f9edf76090e34702e647e6","03c3f6369b934cf86576c394e9172359","758f815f3775e1b063eba3ab33479a9f","0d34d8571c6998796a2edb212a8037f5","6953629af9858647b65c47ae738334db","f94e8d62921d078c58860ffc2374a357","50f2b28aba4d4cb47544bcc98980a63e","9ec150a4c04da6a1087a3cd36086fde3","79a9f2ae5af2b370eea6c7fc6681e3ef","3b94bf347edcc8f137741989de3eb882","485edc4695212c4e97cf2e841661151c","a48f8e50e74b3792eeaffc6d25ca0080","dc2cbd65ca5411b8a9326338c74c7758","940d63f67b70b37e7ee662b851ae389b","05748b4e8730bb2a705fe1e2e00c5d77","8f0f4e736d83e296b55802c2337f341b","01144efd1dc06a0b9d3ea8a1e632dc26","cd9ba1e78dab227e2fda2cf952adcab4")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("1578ad8f244ae82c36e3feadeb7d66e3","8f021266830397dac3e34f1b3bdde60c","05c97434f3c6970103a3ceda97572481","529951790a4a6da8743af98a24c4088e","a141acc27f79584575a7d2af634be917","8550ebb8f4f5b377df3a3492dbc08f63","511b48b4471e8ab08a4ec6495157f62a","0b3b4b02ed9d4844ec53a3f2a7064432","8e0486fb2291090d4411f58aa030dd23","90f31a31dee14f1efc80e7f121a44763","e23b0bab2ebcff10bc39f95cb92e6d9f","28f7a338c703cf695e776108a7dc3f00","5ccb4a79accca8b6fdc364042705b1a9","7789b3c473654e3251b102083d49128a","50920220980a2c188fb88ba770a72ded","452aeffb5c3c564988b0b7686a1433e9","2ef96ecfe9a2d05bfc24a936a97e66f1","fb0dcc61efe76eccef9b7fa20514a1b9","ac34f72d560a282b919da74e2f5ef8e1","3144517e723720c79c5f975a629cd2d7","f1006f3968f9edf76090e34702e647e6","03c3f6369b934cf86576c394e9172359","758f815f3775e1b063eba3ab33479a9f","0d34d8571c6998796a2edb212a8037f5","6953629af9858647b65c47ae738334db","f94e8d62921d078c58860ffc2374a357","50f2b28aba4d4cb47544bcc98980a63e","9ec150a4c04da6a1087a3cd36086fde3","79a9f2ae5af2b370eea6c7fc6681e3ef","3b94bf347edcc8f137741989de3eb882","485edc4695212c4e97cf2e841661151c","a48f8e50e74b3792eeaffc6d25ca0080","dc2cbd65ca5411b8a9326338c74c7758","940d63f67b70b37e7ee662b851ae389b","05748b4e8730bb2a705fe1e2e00c5d77","8f0f4e736d83e296b55802c2337f341b","01144efd1dc06a0b9d3ea8a1e632dc26","cd9ba1e78dab227e2fda2cf952adcab4")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("1578ad8f244ae82c36e3feadeb7d66e3","8f021266830397dac3e34f1b3bdde60c","05c97434f3c6970103a3ceda97572481","529951790a4a6da8743af98a24c4088e","a141acc27f79584575a7d2af634be917","8550ebb8f4f5b377df3a3492dbc08f63","511b48b4471e8ab08a4ec6495157f62a","0b3b4b02ed9d4844ec53a3f2a7064432","8e0486fb2291090d4411f58aa030dd23","90f31a31dee14f1efc80e7f121a44763","e23b0bab2ebcff10bc39f95cb92e6d9f","28f7a338c703cf695e776108a7dc3f00","5ccb4a79accca8b6fdc364042705b1a9","7789b3c473654e3251b102083d49128a","50920220980a2c188fb88ba770a72ded","452aeffb5c3c564988b0b7686a1433e9","2ef96ecfe9a2d05bfc24a936a97e66f1","fb0dcc61efe76eccef9b7fa20514a1b9","ac34f72d560a282b919da74e2f5ef8e1","3144517e723720c79c5f975a629cd2d7","f1006f3968f9edf76090e34702e647e6","03c3f6369b934cf86576c394e9172359","758f815f3775e1b063eba3ab33479a9f","0d34d8571c6998796a2edb212a8037f5","6953629af9858647b65c47ae738334db","f94e8d62921d078c58860ffc2374a357","50f2b28aba4d4cb47544bcc98980a63e","9ec150a4c04da6a1087a3cd36086fde3","79a9f2ae5af2b370eea6c7fc6681e3ef","3b94bf347edcc8f137741989de3eb882","485edc4695212c4e97cf2e841661151c","a48f8e50e74b3792eeaffc6d25ca0080","dc2cbd65ca5411b8a9326338c74c7758","940d63f67b70b37e7ee662b851ae389b","05748b4e8730bb2a705fe1e2e00c5d77","8f0f4e736d83e296b55802c2337f341b","01144efd1dc06a0b9d3ea8a1e632dc26","cd9ba1e78dab227e2fda2cf952adcab4")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("1578ad8f244ae82c36e3feadeb7d66e3","8f021266830397dac3e34f1b3bdde60c","05c97434f3c6970103a3ceda97572481","529951790a4a6da8743af98a24c4088e","a141acc27f79584575a7d2af634be917","8550ebb8f4f5b377df3a3492dbc08f63","511b48b4471e8ab08a4ec6495157f62a","0b3b4b02ed9d4844ec53a3f2a7064432","8e0486fb2291090d4411f58aa030dd23","90f31a31dee14f1efc80e7f121a44763","e23b0bab2ebcff10bc39f95cb92e6d9f","28f7a338c703cf695e776108a7dc3f00","5ccb4a79accca8b6fdc364042705b1a9","7789b3c473654e3251b102083d49128a","50920220980a2c188fb88ba770a72ded","452aeffb5c3c564988b0b7686a1433e9","2ef96ecfe9a2d05bfc24a936a97e66f1","fb0dcc61efe76eccef9b7fa20514a1b9","ac34f72d560a282b919da74e2f5ef8e1","3144517e723720c79c5f975a629cd2d7","f1006f3968f9edf76090e34702e647e6","03c3f6369b934cf86576c394e9172359","758f815f3775e1b063eba3ab33479a9f","0d34d8571c6998796a2edb212a8037f5","6953629af9858647b65c47ae738334db","f94e8d62921d078c58860ffc2374a357","50f2b28aba4d4cb47544bcc98980a63e","9ec150a4c04da6a1087a3cd36086fde3","79a9f2ae5af2b370eea6c7fc6681e3ef","3b94bf347edcc8f137741989de3eb882","485edc4695212c4e97cf2e841661151c","a48f8e50e74b3792eeaffc6d25ca0080","dc2cbd65ca5411b8a9326338c74c7758","940d63f67b70b37e7ee662b851ae389b","05748b4e8730bb2a705fe1e2e00c5d77","8f0f4e736d83e296b55802c2337f341b","01144efd1dc06a0b9d3ea8a1e632dc26","cd9ba1e78dab227e2fda2cf952adcab4")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("1578ad8f244ae82c36e3feadeb7d66e3","8f021266830397dac3e34f1b3bdde60c","05c97434f3c6970103a3ceda97572481","529951790a4a6da8743af98a24c4088e","a141acc27f79584575a7d2af634be917","8550ebb8f4f5b377df3a3492dbc08f63","511b48b4471e8ab08a4ec6495157f62a","0b3b4b02ed9d4844ec53a3f2a7064432","8e0486fb2291090d4411f58aa030dd23","90f31a31dee14f1efc80e7f121a44763","e23b0bab2ebcff10bc39f95cb92e6d9f","28f7a338c703cf695e776108a7dc3f00","5ccb4a79accca8b6fdc364042705b1a9","7789b3c473654e3251b102083d49128a","50920220980a2c188fb88ba770a72ded","452aeffb5c3c564988b0b7686a1433e9","2ef96ecfe9a2d05bfc24a936a97e66f1","fb0dcc61efe76eccef9b7fa20514a1b9","ac34f72d560a282b919da74e2f5ef8e1","3144517e723720c79c5f975a629cd2d7","f1006f3968f9edf76090e34702e647e6","03c3f6369b934cf86576c394e9172359","758f815f3775e1b063eba3ab33479a9f","0d34d8571c6998796a2edb212a8037f5","6953629af9858647b65c47ae738334db","f94e8d62921d078c58860ffc2374a357","50f2b28aba4d4cb47544bcc98980a63e","9ec150a4c04da6a1087a3cd36086fde3","79a9f2ae5af2b370eea6c7fc6681e3ef","3b94bf347edcc8f137741989de3eb882","485edc4695212c4e97cf2e841661151c","a48f8e50e74b3792eeaffc6d25ca0080","dc2cbd65ca5411b8a9326338c74c7758","940d63f67b70b37e7ee662b851ae389b","05748b4e8730bb2a705fe1e2e00c5d77","8f0f4e736d83e296b55802c2337f341b","01144efd1dc06a0b9d3ea8a1e632dc26","cd9ba1e78dab227e2fda2cf952adcab4")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("1578ad8f244ae82c36e3feadeb7d66e3","8f021266830397dac3e34f1b3bdde60c","05c97434f3c6970103a3ceda97572481","529951790a4a6da8743af98a24c4088e","a141acc27f79584575a7d2af634be917","8550ebb8f4f5b377df3a3492dbc08f63","511b48b4471e8ab08a4ec6495157f62a","0b3b4b02ed9d4844ec53a3f2a7064432","8e0486fb2291090d4411f58aa030dd23","90f31a31dee14f1efc80e7f121a44763","e23b0bab2ebcff10bc39f95cb92e6d9f","28f7a338c703cf695e776108a7dc3f00","5ccb4a79accca8b6fdc364042705b1a9","7789b3c473654e3251b102083d49128a","50920220980a2c188fb88ba770a72ded","452aeffb5c3c564988b0b7686a1433e9","2ef96ecfe9a2d05bfc24a936a97e66f1","fb0dcc61efe76eccef9b7fa20514a1b9","ac34f72d560a282b919da74e2f5ef8e1","3144517e723720c79c5f975a629cd2d7","f1006f3968f9edf76090e34702e647e6","03c3f6369b934cf86576c394e9172359","758f815f3775e1b063eba3ab33479a9f","0d34d8571c6998796a2edb212a8037f5","6953629af9858647b65c47ae738334db","f94e8d62921d078c58860ffc2374a357","50f2b28aba4d4cb47544bcc98980a63e","9ec150a4c04da6a1087a3cd36086fde3","79a9f2ae5af2b370eea6c7fc6681e3ef","3b94bf347edcc8f137741989de3eb882","485edc4695212c4e97cf2e841661151c","a48f8e50e74b3792eeaffc6d25ca0080","dc2cbd65ca5411b8a9326338c74c7758","940d63f67b70b37e7ee662b851ae389b","05748b4e8730bb2a705fe1e2e00c5d77","8f0f4e736d83e296b55802c2337f341b","01144efd1dc06a0b9d3ea8a1e632dc26","cd9ba1e78dab227e2fda2cf952adcab4")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("1578ad8f244ae82c36e3feadeb7d66e3","8f021266830397dac3e34f1b3bdde60c","05c97434f3c6970103a3ceda97572481","529951790a4a6da8743af98a24c4088e","a141acc27f79584575a7d2af634be917","8550ebb8f4f5b377df3a3492dbc08f63","511b48b4471e8ab08a4ec6495157f62a","0b3b4b02ed9d4844ec53a3f2a7064432","8e0486fb2291090d4411f58aa030dd23","90f31a31dee14f1efc80e7f121a44763","e23b0bab2ebcff10bc39f95cb92e6d9f","28f7a338c703cf695e776108a7dc3f00","5ccb4a79accca8b6fdc364042705b1a9","7789b3c473654e3251b102083d49128a","50920220980a2c188fb88ba770a72ded","452aeffb5c3c564988b0b7686a1433e9","2ef96ecfe9a2d05bfc24a936a97e66f1","fb0dcc61efe76eccef9b7fa20514a1b9","ac34f72d560a282b919da74e2f5ef8e1","3144517e723720c79c5f975a629cd2d7","f1006f3968f9edf76090e34702e647e6","03c3f6369b934cf86576c394e9172359","758f815f3775e1b063eba3ab33479a9f","0d34d8571c6998796a2edb212a8037f5","6953629af9858647b65c47ae738334db","f94e8d62921d078c58860ffc2374a357","50f2b28aba4d4cb47544bcc98980a63e","9ec150a4c04da6a1087a3cd36086fde3","79a9f2ae5af2b370eea6c7fc6681e3ef","3b94bf347edcc8f137741989de3eb882","485edc4695212c4e97cf2e841661151c","a48f8e50e74b3792eeaffc6d25ca0080","dc2cbd65ca5411b8a9326338c74c7758","940d63f67b70b37e7ee662b851ae389b","05748b4e8730bb2a705fe1e2e00c5d77","8f0f4e736d83e296b55802c2337f341b","01144efd1dc06a0b9d3ea8a1e632dc26","cd9ba1e78dab227e2fda2cf952adcab4")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("1578ad8f244ae82c36e3feadeb7d66e3","8f021266830397dac3e34f1b3bdde60c","05c97434f3c6970103a3ceda97572481","529951790a4a6da8743af98a24c4088e","a141acc27f79584575a7d2af634be917","8550ebb8f4f5b377df3a3492dbc08f63","511b48b4471e8ab08a4ec6495157f62a","0b3b4b02ed9d4844ec53a3f2a7064432","8e0486fb2291090d4411f58aa030dd23","90f31a31dee14f1efc80e7f121a44763","e23b0bab2ebcff10bc39f95cb92e6d9f","28f7a338c703cf695e776108a7dc3f00","5ccb4a79accca8b6fdc364042705b1a9","7789b3c473654e3251b102083d49128a","50920220980a2c188fb88ba770a72ded","452aeffb5c3c564988b0b7686a1433e9","2ef96ecfe9a2d05bfc24a936a97e66f1","fb0dcc61efe76eccef9b7fa20514a1b9","ac34f72d560a282b919da74e2f5ef8e1","3144517e723720c79c5f975a629cd2d7","f1006f3968f9edf76090e34702e647e6","03c3f6369b934cf86576c394e9172359","758f815f3775e1b063eba3ab33479a9f","0d34d8571c6998796a2edb212a8037f5","6953629af9858647b65c47ae738334db","f94e8d62921d078c58860ffc2374a357","50f2b28aba4d4cb47544bcc98980a63e","9ec150a4c04da6a1087a3cd36086fde3","79a9f2ae5af2b370eea6c7fc6681e3ef","3b94bf347edcc8f137741989de3eb882","485edc4695212c4e97cf2e841661151c","a48f8e50e74b3792eeaffc6d25ca0080","dc2cbd65ca5411b8a9326338c74c7758","940d63f67b70b37e7ee662b851ae389b","05748b4e8730bb2a705fe1e2e00c5d77","8f0f4e736d83e296b55802c2337f341b","01144efd1dc06a0b9d3ea8a1e632dc26","cd9ba1e78dab227e2fda2cf952adcab4")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("1578ad8f244ae82c36e3feadeb7d66e3","8f021266830397dac3e34f1b3bdde60c","05c97434f3c6970103a3ceda97572481","529951790a4a6da8743af98a24c4088e","a141acc27f79584575a7d2af634be917","8550ebb8f4f5b377df3a3492dbc08f63","511b48b4471e8ab08a4ec6495157f62a","0b3b4b02ed9d4844ec53a3f2a7064432","8e0486fb2291090d4411f58aa030dd23","90f31a31dee14f1efc80e7f121a44763","e23b0bab2ebcff10bc39f95cb92e6d9f","28f7a338c703cf695e776108a7dc3f00","5ccb4a79accca8b6fdc364042705b1a9","7789b3c473654e3251b102083d49128a","50920220980a2c188fb88ba770a72ded","452aeffb5c3c564988b0b7686a1433e9","2ef96ecfe9a2d05bfc24a936a97e66f1","fb0dcc61efe76eccef9b7fa20514a1b9","ac34f72d560a282b919da74e2f5ef8e1","3144517e723720c79c5f975a629cd2d7","f1006f3968f9edf76090e34702e647e6","03c3f6369b934cf86576c394e9172359","758f815f3775e1b063eba3ab33479a9f","0d34d8571c6998796a2edb212a8037f5","6953629af9858647b65c47ae738334db","f94e8d62921d078c58860ffc2374a357","50f2b28aba4d4cb47544bcc98980a63e","9ec150a4c04da6a1087a3cd36086fde3","79a9f2ae5af2b370eea6c7fc6681e3ef","3b94bf347edcc8f137741989de3eb882","485edc4695212c4e97cf2e841661151c","a48f8e50e74b3792eeaffc6d25ca0080","dc2cbd65ca5411b8a9326338c74c7758","940d63f67b70b37e7ee662b851ae389b","05748b4e8730bb2a705fe1e2e00c5d77","8f0f4e736d83e296b55802c2337f341b","01144efd1dc06a0b9d3ea8a1e632dc26","cd9ba1e78dab227e2fda2cf952adcab4")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("1578ad8f244ae82c36e3feadeb7d66e3","8f021266830397dac3e34f1b3bdde60c","05c97434f3c6970103a3ceda97572481","529951790a4a6da8743af98a24c4088e","a141acc27f79584575a7d2af634be917","8550ebb8f4f5b377df3a3492dbc08f63","511b48b4471e8ab08a4ec6495157f62a","0b3b4b02ed9d4844ec53a3f2a7064432","8e0486fb2291090d4411f58aa030dd23","90f31a31dee14f1efc80e7f121a44763","e23b0bab2ebcff10bc39f95cb92e6d9f","28f7a338c703cf695e776108a7dc3f00","5ccb4a79accca8b6fdc364042705b1a9","7789b3c473654e3251b102083d49128a","50920220980a2c188fb88ba770a72ded","452aeffb5c3c564988b0b7686a1433e9","2ef96ecfe9a2d05bfc24a936a97e66f1","fb0dcc61efe76eccef9b7fa20514a1b9","ac34f72d560a282b919da74e2f5ef8e1","3144517e723720c79c5f975a629cd2d7","f1006f3968f9edf76090e34702e647e6","03c3f6369b934cf86576c394e9172359","758f815f3775e1b063eba3ab33479a9f","0d34d8571c6998796a2edb212a8037f5","6953629af9858647b65c47ae738334db","f94e8d62921d078c58860ffc2374a357","50f2b28aba4d4cb47544bcc98980a63e","9ec150a4c04da6a1087a3cd36086fde3","79a9f2ae5af2b370eea6c7fc6681e3ef","3b94bf347edcc8f137741989de3eb882","485edc4695212c4e97cf2e841661151c","a48f8e50e74b3792eeaffc6d25ca0080","dc2cbd65ca5411b8a9326338c74c7758","940d63f67b70b37e7ee662b851ae389b","05748b4e8730bb2a705fe1e2e00c5d77","8f0f4e736d83e296b55802c2337f341b","01144efd1dc06a0b9d3ea8a1e632dc26","cd9ba1e78dab227e2fda2cf952adcab4")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("1578ad8f244ae82c36e3feadeb7d66e3","8f021266830397dac3e34f1b3bdde60c","05c97434f3c6970103a3ceda97572481","529951790a4a6da8743af98a24c4088e","a141acc27f79584575a7d2af634be917","8550ebb8f4f5b377df3a3492dbc08f63","511b48b4471e8ab08a4ec6495157f62a","0b3b4b02ed9d4844ec53a3f2a7064432","8e0486fb2291090d4411f58aa030dd23","90f31a31dee14f1efc80e7f121a44763","e23b0bab2ebcff10bc39f95cb92e6d9f","28f7a338c703cf695e776108a7dc3f00","5ccb4a79accca8b6fdc364042705b1a9","7789b3c473654e3251b102083d49128a","50920220980a2c188fb88ba770a72ded","452aeffb5c3c564988b0b7686a1433e9","2ef96ecfe9a2d05bfc24a936a97e66f1","fb0dcc61efe76eccef9b7fa20514a1b9","ac34f72d560a282b919da74e2f5ef8e1","3144517e723720c79c5f975a629cd2d7","f1006f3968f9edf76090e34702e647e6","03c3f6369b934cf86576c394e9172359","758f815f3775e1b063eba3ab33479a9f","0d34d8571c6998796a2edb212a8037f5","6953629af9858647b65c47ae738334db","f94e8d62921d078c58860ffc2374a357","50f2b28aba4d4cb47544bcc98980a63e","9ec150a4c04da6a1087a3cd36086fde3","79a9f2ae5af2b370eea6c7fc6681e3ef","3b94bf347edcc8f137741989de3eb882","485edc4695212c4e97cf2e841661151c","a48f8e50e74b3792eeaffc6d25ca0080","dc2cbd65ca5411b8a9326338c74c7758","940d63f67b70b37e7ee662b851ae389b","05748b4e8730bb2a705fe1e2e00c5d77","8f0f4e736d83e296b55802c2337f341b","01144efd1dc06a0b9d3ea8a1e632dc26","cd9ba1e78dab227e2fda2cf952adcab4")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("1578ad8f244ae82c36e3feadeb7d66e3","8f021266830397dac3e34f1b3bdde60c","05c97434f3c6970103a3ceda97572481","529951790a4a6da8743af98a24c4088e","a141acc27f79584575a7d2af634be917","8550ebb8f4f5b377df3a3492dbc08f63","511b48b4471e8ab08a4ec6495157f62a","0b3b4b02ed9d4844ec53a3f2a7064432","8e0486fb2291090d4411f58aa030dd23","90f31a31dee14f1efc80e7f121a44763","e23b0bab2ebcff10bc39f95cb92e6d9f","28f7a338c703cf695e776108a7dc3f00","5ccb4a79accca8b6fdc364042705b1a9","7789b3c473654e3251b102083d49128a","50920220980a2c188fb88ba770a72ded","452aeffb5c3c564988b0b7686a1433e9","2ef96ecfe9a2d05bfc24a936a97e66f1","fb0dcc61efe76eccef9b7fa20514a1b9","ac34f72d560a282b919da74e2f5ef8e1","3144517e723720c79c5f975a629cd2d7","f1006f3968f9edf76090e34702e647e6","03c3f6369b934cf86576c394e9172359","758f815f3775e1b063eba3ab33479a9f","0d34d8571c6998796a2edb212a8037f5","6953629af9858647b65c47ae738334db","f94e8d62921d078c58860ffc2374a357","50f2b28aba4d4cb47544bcc98980a63e","9ec150a4c04da6a1087a3cd36086fde3","79a9f2ae5af2b370eea6c7fc6681e3ef","3b94bf347edcc8f137741989de3eb882","485edc4695212c4e97cf2e841661151c","a48f8e50e74b3792eeaffc6d25ca0080","dc2cbd65ca5411b8a9326338c74c7758","940d63f67b70b37e7ee662b851ae389b","05748b4e8730bb2a705fe1e2e00c5d77","8f0f4e736d83e296b55802c2337f341b","01144efd1dc06a0b9d3ea8a1e632dc26","cd9ba1e78dab227e2fda2cf952adcab4")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("1578ad8f244ae82c36e3feadeb7d66e3","8f021266830397dac3e34f1b3bdde60c","05c97434f3c6970103a3ceda97572481","529951790a4a6da8743af98a24c4088e","a141acc27f79584575a7d2af634be917","8550ebb8f4f5b377df3a3492dbc08f63","511b48b4471e8ab08a4ec6495157f62a","0b3b4b02ed9d4844ec53a3f2a7064432","8e0486fb2291090d4411f58aa030dd23","90f31a31dee14f1efc80e7f121a44763","e23b0bab2ebcff10bc39f95cb92e6d9f","28f7a338c703cf695e776108a7dc3f00","5ccb4a79accca8b6fdc364042705b1a9","7789b3c473654e3251b102083d49128a","50920220980a2c188fb88ba770a72ded","452aeffb5c3c564988b0b7686a1433e9","2ef96ecfe9a2d05bfc24a936a97e66f1","fb0dcc61efe76eccef9b7fa20514a1b9","ac34f72d560a282b919da74e2f5ef8e1","3144517e723720c79c5f975a629cd2d7","f1006f3968f9edf76090e34702e647e6","03c3f6369b934cf86576c394e9172359","758f815f3775e1b063eba3ab33479a9f","0d34d8571c6998796a2edb212a8037f5","6953629af9858647b65c47ae738334db","f94e8d62921d078c58860ffc2374a357","50f2b28aba4d4cb47544bcc98980a63e","9ec150a4c04da6a1087a3cd36086fde3","79a9f2ae5af2b370eea6c7fc6681e3ef","3b94bf347edcc8f137741989de3eb882","485edc4695212c4e97cf2e841661151c","a48f8e50e74b3792eeaffc6d25ca0080","dc2cbd65ca5411b8a9326338c74c7758","940d63f67b70b37e7ee662b851ae389b","05748b4e8730bb2a705fe1e2e00c5d77","8f0f4e736d83e296b55802c2337f341b","01144efd1dc06a0b9d3ea8a1e632dc26","cd9ba1e78dab227e2fda2cf952adcab4")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("1578ad8f244ae82c36e3feadeb7d66e3","8f021266830397dac3e34f1b3bdde60c","05c97434f3c6970103a3ceda97572481","529951790a4a6da8743af98a24c4088e","a141acc27f79584575a7d2af634be917","8550ebb8f4f5b377df3a3492dbc08f63","511b48b4471e8ab08a4ec6495157f62a","0b3b4b02ed9d4844ec53a3f2a7064432","8e0486fb2291090d4411f58aa030dd23","90f31a31dee14f1efc80e7f121a44763","e23b0bab2ebcff10bc39f95cb92e6d9f","28f7a338c703cf695e776108a7dc3f00","5ccb4a79accca8b6fdc364042705b1a9","7789b3c473654e3251b102083d49128a","50920220980a2c188fb88ba770a72ded","452aeffb5c3c564988b0b7686a1433e9","2ef96ecfe9a2d05bfc24a936a97e66f1","fb0dcc61efe76eccef9b7fa20514a1b9","ac34f72d560a282b919da74e2f5ef8e1","3144517e723720c79c5f975a629cd2d7","f1006f3968f9edf76090e34702e647e6","03c3f6369b934cf86576c394e9172359","758f815f3775e1b063eba3ab33479a9f","0d34d8571c6998796a2edb212a8037f5","6953629af9858647b65c47ae738334db","f94e8d62921d078c58860ffc2374a357","50f2b28aba4d4cb47544bcc98980a63e","9ec150a4c04da6a1087a3cd36086fde3","79a9f2ae5af2b370eea6c7fc6681e3ef","3b94bf347edcc8f137741989de3eb882","485edc4695212c4e97cf2e841661151c","a48f8e50e74b3792eeaffc6d25ca0080","dc2cbd65ca5411b8a9326338c74c7758","940d63f67b70b37e7ee662b851ae389b","05748b4e8730bb2a705fe1e2e00c5d77","8f0f4e736d83e296b55802c2337f341b","01144efd1dc06a0b9d3ea8a1e632dc26","cd9ba1e78dab227e2fda2cf952adcab4")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("1578ad8f244ae82c36e3feadeb7d66e3","8f021266830397dac3e34f1b3bdde60c","05c97434f3c6970103a3ceda97572481","529951790a4a6da8743af98a24c4088e","a141acc27f79584575a7d2af634be917","8550ebb8f4f5b377df3a3492dbc08f63","511b48b4471e8ab08a4ec6495157f62a","0b3b4b02ed9d4844ec53a3f2a7064432","8e0486fb2291090d4411f58aa030dd23","90f31a31dee14f1efc80e7f121a44763","e23b0bab2ebcff10bc39f95cb92e6d9f","28f7a338c703cf695e776108a7dc3f00","5ccb4a79accca8b6fdc364042705b1a9","7789b3c473654e3251b102083d49128a","50920220980a2c188fb88ba770a72ded","452aeffb5c3c564988b0b7686a1433e9","2ef96ecfe9a2d05bfc24a936a97e66f1","fb0dcc61efe76eccef9b7fa20514a1b9","ac34f72d560a282b919da74e2f5ef8e1","3144517e723720c79c5f975a629cd2d7","f1006f3968f9edf76090e34702e647e6","03c3f6369b934cf86576c394e9172359","758f815f3775e1b063eba3ab33479a9f","0d34d8571c6998796a2edb212a8037f5","6953629af9858647b65c47ae738334db","f94e8d62921d078c58860ffc2374a357","50f2b28aba4d4cb47544bcc98980a63e","9ec150a4c04da6a1087a3cd36086fde3","79a9f2ae5af2b370eea6c7fc6681e3ef","3b94bf347edcc8f137741989de3eb882","485edc4695212c4e97cf2e841661151c","a48f8e50e74b3792eeaffc6d25ca0080","dc2cbd65ca5411b8a9326338c74c7758","940d63f67b70b37e7ee662b851ae389b","05748b4e8730bb2a705fe1e2e00c5d77","8f0f4e736d83e296b55802c2337f341b","01144efd1dc06a0b9d3ea8a1e632dc26","cd9ba1e78dab227e2fda2cf952adcab4")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("1578ad8f244ae82c36e3feadeb7d66e3","8f021266830397dac3e34f1b3bdde60c","05c97434f3c6970103a3ceda97572481","529951790a4a6da8743af98a24c4088e","a141acc27f79584575a7d2af634be917","8550ebb8f4f5b377df3a3492dbc08f63","511b48b4471e8ab08a4ec6495157f62a","0b3b4b02ed9d4844ec53a3f2a7064432","8e0486fb2291090d4411f58aa030dd23","90f31a31dee14f1efc80e7f121a44763","e23b0bab2ebcff10bc39f95cb92e6d9f","28f7a338c703cf695e776108a7dc3f00","5ccb4a79accca8b6fdc364042705b1a9","7789b3c473654e3251b102083d49128a","50920220980a2c188fb88ba770a72ded","452aeffb5c3c564988b0b7686a1433e9","2ef96ecfe9a2d05bfc24a936a97e66f1","fb0dcc61efe76eccef9b7fa20514a1b9","ac34f72d560a282b919da74e2f5ef8e1","3144517e723720c79c5f975a629cd2d7","f1006f3968f9edf76090e34702e647e6","03c3f6369b934cf86576c394e9172359","758f815f3775e1b063eba3ab33479a9f","0d34d8571c6998796a2edb212a8037f5","6953629af9858647b65c47ae738334db","f94e8d62921d078c58860ffc2374a357","50f2b28aba4d4cb47544bcc98980a63e","9ec150a4c04da6a1087a3cd36086fde3","79a9f2ae5af2b370eea6c7fc6681e3ef","3b94bf347edcc8f137741989de3eb882","485edc4695212c4e97cf2e841661151c","a48f8e50e74b3792eeaffc6d25ca0080","dc2cbd65ca5411b8a9326338c74c7758","940d63f67b70b37e7ee662b851ae389b","05748b4e8730bb2a705fe1e2e00c5d77","8f0f4e736d83e296b55802c2337f341b","01144efd1dc06a0b9d3ea8a1e632dc26","cd9ba1e78dab227e2fda2cf952adcab4")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("1578ad8f244ae82c36e3feadeb7d66e3","8f021266830397dac3e34f1b3bdde60c","05c97434f3c6970103a3ceda97572481","529951790a4a6da8743af98a24c4088e","a141acc27f79584575a7d2af634be917","8550ebb8f4f5b377df3a3492dbc08f63","511b48b4471e8ab08a4ec6495157f62a","0b3b4b02ed9d4844ec53a3f2a7064432","8e0486fb2291090d4411f58aa030dd23","90f31a31dee14f1efc80e7f121a44763","e23b0bab2ebcff10bc39f95cb92e6d9f","28f7a338c703cf695e776108a7dc3f00","5ccb4a79accca8b6fdc364042705b1a9","7789b3c473654e3251b102083d49128a","50920220980a2c188fb88ba770a72ded","452aeffb5c3c564988b0b7686a1433e9","2ef96ecfe9a2d05bfc24a936a97e66f1","fb0dcc61efe76eccef9b7fa20514a1b9","ac34f72d560a282b919da74e2f5ef8e1","3144517e723720c79c5f975a629cd2d7","f1006f3968f9edf76090e34702e647e6","03c3f6369b934cf86576c394e9172359","758f815f3775e1b063eba3ab33479a9f","0d34d8571c6998796a2edb212a8037f5","6953629af9858647b65c47ae738334db","f94e8d62921d078c58860ffc2374a357","50f2b28aba4d4cb47544bcc98980a63e","9ec150a4c04da6a1087a3cd36086fde3","79a9f2ae5af2b370eea6c7fc6681e3ef","3b94bf347edcc8f137741989de3eb882","485edc4695212c4e97cf2e841661151c","a48f8e50e74b3792eeaffc6d25ca0080","dc2cbd65ca5411b8a9326338c74c7758","940d63f67b70b37e7ee662b851ae389b","05748b4e8730bb2a705fe1e2e00c5d77","8f0f4e736d83e296b55802c2337f341b","01144efd1dc06a0b9d3ea8a1e632dc26","cd9ba1e78dab227e2fda2cf952adcab4")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("1578ad8f244ae82c36e3feadeb7d66e3","8f021266830397dac3e34f1b3bdde60c","05c97434f3c6970103a3ceda97572481","529951790a4a6da8743af98a24c4088e","a141acc27f79584575a7d2af634be917","8550ebb8f4f5b377df3a3492dbc08f63","511b48b4471e8ab08a4ec6495157f62a","0b3b4b02ed9d4844ec53a3f2a7064432","8e0486fb2291090d4411f58aa030dd23","90f31a31dee14f1efc80e7f121a44763","e23b0bab2ebcff10bc39f95cb92e6d9f","28f7a338c703cf695e776108a7dc3f00","5ccb4a79accca8b6fdc364042705b1a9","7789b3c473654e3251b102083d49128a","50920220980a2c188fb88ba770a72ded","452aeffb5c3c564988b0b7686a1433e9","2ef96ecfe9a2d05bfc24a936a97e66f1","fb0dcc61efe76eccef9b7fa20514a1b9","ac34f72d560a282b919da74e2f5ef8e1","3144517e723720c79c5f975a629cd2d7","f1006f3968f9edf76090e34702e647e6","03c3f6369b934cf86576c394e9172359","758f815f3775e1b063eba3ab33479a9f","0d34d8571c6998796a2edb212a8037f5","6953629af9858647b65c47ae738334db","f94e8d62921d078c58860ffc2374a357","50f2b28aba4d4cb47544bcc98980a63e","9ec150a4c04da6a1087a3cd36086fde3","79a9f2ae5af2b370eea6c7fc6681e3ef","3b94bf347edcc8f137741989de3eb882","485edc4695212c4e97cf2e841661151c","a48f8e50e74b3792eeaffc6d25ca0080","dc2cbd65ca5411b8a9326338c74c7758","940d63f67b70b37e7ee662b851ae389b","05748b4e8730bb2a705fe1e2e00c5d77","8f0f4e736d83e296b55802c2337f341b","01144efd1dc06a0b9d3ea8a1e632dc26","cd9ba1e78dab227e2fda2cf952adcab4")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("1578ad8f244ae82c36e3feadeb7d66e3","8f021266830397dac3e34f1b3bdde60c","05c97434f3c6970103a3ceda97572481","529951790a4a6da8743af98a24c4088e","a141acc27f79584575a7d2af634be917","8550ebb8f4f5b377df3a3492dbc08f63","511b48b4471e8ab08a4ec6495157f62a","0b3b4b02ed9d4844ec53a3f2a7064432","8e0486fb2291090d4411f58aa030dd23","90f31a31dee14f1efc80e7f121a44763","e23b0bab2ebcff10bc39f95cb92e6d9f","28f7a338c703cf695e776108a7dc3f00","5ccb4a79accca8b6fdc364042705b1a9","7789b3c473654e3251b102083d49128a","50920220980a2c188fb88ba770a72ded","452aeffb5c3c564988b0b7686a1433e9","2ef96ecfe9a2d05bfc24a936a97e66f1","fb0dcc61efe76eccef9b7fa20514a1b9","ac34f72d560a282b919da74e2f5ef8e1","3144517e723720c79c5f975a629cd2d7","f1006f3968f9edf76090e34702e647e6","03c3f6369b934cf86576c394e9172359","758f815f3775e1b063eba3ab33479a9f","0d34d8571c6998796a2edb212a8037f5","6953629af9858647b65c47ae738334db","f94e8d62921d078c58860ffc2374a357","50f2b28aba4d4cb47544bcc98980a63e","9ec150a4c04da6a1087a3cd36086fde3","79a9f2ae5af2b370eea6c7fc6681e3ef","3b94bf347edcc8f137741989de3eb882","485edc4695212c4e97cf2e841661151c","a48f8e50e74b3792eeaffc6d25ca0080","dc2cbd65ca5411b8a9326338c74c7758","940d63f67b70b37e7ee662b851ae389b","05748b4e8730bb2a705fe1e2e00c5d77","8f0f4e736d83e296b55802c2337f341b","01144efd1dc06a0b9d3ea8a1e632dc26","cd9ba1e78dab227e2fda2cf952adcab4")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://jordanserver232.com" OR destinationhostname CONTAINS "http://realacademicmediausa.com" OR destinationhostname CONTAINS "http://topexpertshop.com" OR destinationhostname CONTAINS "http://realmoneycreate.xyz" OR destinationhostname CONTAINS "http://thehomenow.xyz" OR destinationhostname CONTAINS "http://real-enter-solutions.xyz" OR destinationhostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://jordanserver232.com" OR sourcentdomain CONTAINS "http://realacademicmediausa.com" OR sourcentdomain CONTAINS "http://topexpertshop.com" OR sourcentdomain CONTAINS "http://realmoneycreate.xyz" OR sourcentdomain CONTAINS "http://thehomenow.xyz" OR sourcentdomain CONTAINS "http://real-enter-solutions.xyz" OR sourcentdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://jordanserver232.com" OR sourcehostname CONTAINS "http://realacademicmediausa.com" OR sourcehostname CONTAINS "http://topexpertshop.com" OR sourcehostname CONTAINS "http://realmoneycreate.xyz" OR sourcehostname CONTAINS "http://thehomenow.xyz" OR sourcehostname CONTAINS "http://real-enter-solutions.xyz" OR sourcehostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://jordanserver232.com" OR destinationntdomain CONTAINS "http://realacademicmediausa.com" OR destinationntdomain CONTAINS "http://topexpertshop.com" OR destinationntdomain CONTAINS "http://realmoneycreate.xyz" OR destinationntdomain CONTAINS "http://thehomenow.xyz" OR destinationntdomain CONTAINS "http://real-enter-solutions.xyz" OR destinationntdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://jordanserver232.com" OR destinationhostname CONTAINS "http://realacademicmediausa.com" OR destinationhostname CONTAINS "http://topexpertshop.com" OR destinationhostname CONTAINS "http://realmoneycreate.xyz" OR destinationhostname CONTAINS "http://thehomenow.xyz" OR destinationhostname CONTAINS "http://real-enter-solutions.xyz" OR destinationhostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://jordanserver232.com" OR sourcentdomain CONTAINS "http://realacademicmediausa.com" OR sourcentdomain CONTAINS "http://topexpertshop.com" OR sourcentdomain CONTAINS "http://realmoneycreate.xyz" OR sourcentdomain CONTAINS "http://thehomenow.xyz" OR sourcentdomain CONTAINS "http://real-enter-solutions.xyz" OR sourcentdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://jordanserver232.com" OR sourcehostname CONTAINS "http://realacademicmediausa.com" OR sourcehostname CONTAINS "http://topexpertshop.com" OR sourcehostname CONTAINS "http://realmoneycreate.xyz" OR sourcehostname CONTAINS "http://thehomenow.xyz" OR sourcehostname CONTAINS "http://real-enter-solutions.xyz" OR sourcehostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://jordanserver232.com" OR destinationntdomain CONTAINS "http://realacademicmediausa.com" OR destinationntdomain CONTAINS "http://topexpertshop.com" OR destinationntdomain CONTAINS "http://realmoneycreate.xyz" OR destinationntdomain CONTAINS "http://thehomenow.xyz" OR destinationntdomain CONTAINS "http://real-enter-solutions.xyz" OR destinationntdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://jordanserver232.com" OR destinationhostname CONTAINS "http://realacademicmediausa.com" OR destinationhostname CONTAINS "http://topexpertshop.com" OR destinationhostname CONTAINS "http://realmoneycreate.xyz" OR destinationhostname CONTAINS "http://thehomenow.xyz" OR destinationhostname CONTAINS "http://real-enter-solutions.xyz" OR destinationhostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://jordanserver232.com" OR sourcentdomain CONTAINS "http://realacademicmediausa.com" OR sourcentdomain CONTAINS "http://topexpertshop.com" OR sourcentdomain CONTAINS "http://realmoneycreate.xyz" OR sourcentdomain CONTAINS "http://thehomenow.xyz" OR sourcentdomain CONTAINS "http://real-enter-solutions.xyz" OR sourcentdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://jordanserver232.com" OR sourcehostname CONTAINS "http://realacademicmediausa.com" OR sourcehostname CONTAINS "http://topexpertshop.com" OR sourcehostname CONTAINS "http://realmoneycreate.xyz" OR sourcehostname CONTAINS "http://thehomenow.xyz" OR sourcehostname CONTAINS "http://real-enter-solutions.xyz" OR sourcehostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://jordanserver232.com" OR destinationntdomain CONTAINS "http://realacademicmediausa.com" OR destinationntdomain CONTAINS "http://topexpertshop.com" OR destinationntdomain CONTAINS "http://realmoneycreate.xyz" OR destinationntdomain CONTAINS "http://thehomenow.xyz" OR destinationntdomain CONTAINS "http://real-enter-solutions.xyz" OR destinationntdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://jordanserver232.com" OR destinationhostname CONTAINS "http://realacademicmediausa.com" OR destinationhostname CONTAINS "http://topexpertshop.com" OR destinationhostname CONTAINS "http://realmoneycreate.xyz" OR destinationhostname CONTAINS "http://thehomenow.xyz" OR destinationhostname CONTAINS "http://real-enter-solutions.xyz" OR destinationhostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://jordanserver232.com" OR sourcentdomain CONTAINS "http://realacademicmediausa.com" OR sourcentdomain CONTAINS "http://topexpertshop.com" OR sourcentdomain CONTAINS "http://realmoneycreate.xyz" OR sourcentdomain CONTAINS "http://thehomenow.xyz" OR sourcentdomain CONTAINS "http://real-enter-solutions.xyz" OR sourcentdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://jordanserver232.com" OR sourcehostname CONTAINS "http://realacademicmediausa.com" OR sourcehostname CONTAINS "http://topexpertshop.com" OR sourcehostname CONTAINS "http://realmoneycreate.xyz" OR sourcehostname CONTAINS "http://thehomenow.xyz" OR sourcehostname CONTAINS "http://real-enter-solutions.xyz" OR sourcehostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://jordanserver232.com" OR destinationntdomain CONTAINS "http://realacademicmediausa.com" OR destinationntdomain CONTAINS "http://topexpertshop.com" OR destinationntdomain CONTAINS "http://realmoneycreate.xyz" OR destinationntdomain CONTAINS "http://thehomenow.xyz" OR destinationntdomain CONTAINS "http://real-enter-solutions.xyz" OR destinationntdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://jordanserver232.com" OR destinationhostname CONTAINS "http://realacademicmediausa.com" OR destinationhostname CONTAINS "http://topexpertshop.com" OR destinationhostname CONTAINS "http://realmoneycreate.xyz" OR destinationhostname CONTAINS "http://thehomenow.xyz" OR destinationhostname CONTAINS "http://real-enter-solutions.xyz" OR destinationhostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://jordanserver232.com" OR sourcentdomain CONTAINS "http://realacademicmediausa.com" OR sourcentdomain CONTAINS "http://topexpertshop.com" OR sourcentdomain CONTAINS "http://realmoneycreate.xyz" OR sourcentdomain CONTAINS "http://thehomenow.xyz" OR sourcentdomain CONTAINS "http://real-enter-solutions.xyz" OR sourcentdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://jordanserver232.com" OR sourcehostname CONTAINS "http://realacademicmediausa.com" OR sourcehostname CONTAINS "http://topexpertshop.com" OR sourcehostname CONTAINS "http://realmoneycreate.xyz" OR sourcehostname CONTAINS "http://thehomenow.xyz" OR sourcehostname CONTAINS "http://real-enter-solutions.xyz" OR sourcehostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://jordanserver232.com" OR destinationntdomain CONTAINS "http://realacademicmediausa.com" OR destinationntdomain CONTAINS "http://topexpertshop.com" OR destinationntdomain CONTAINS "http://realmoneycreate.xyz" OR destinationntdomain CONTAINS "http://thehomenow.xyz" OR destinationntdomain CONTAINS "http://real-enter-solutions.xyz" OR destinationntdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://jordanserver232.com" OR destinationhostname CONTAINS "http://realacademicmediausa.com" OR destinationhostname CONTAINS "http://topexpertshop.com" OR destinationhostname CONTAINS "http://realmoneycreate.xyz" OR destinationhostname CONTAINS "http://thehomenow.xyz" OR destinationhostname CONTAINS "http://real-enter-solutions.xyz" OR destinationhostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://jordanserver232.com" OR sourcentdomain CONTAINS "http://realacademicmediausa.com" OR sourcentdomain CONTAINS "http://topexpertshop.com" OR sourcentdomain CONTAINS "http://realmoneycreate.xyz" OR sourcentdomain CONTAINS "http://thehomenow.xyz" OR sourcentdomain CONTAINS "http://real-enter-solutions.xyz" OR sourcentdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://jordanserver232.com" OR sourcehostname CONTAINS "http://realacademicmediausa.com" OR sourcehostname CONTAINS "http://topexpertshop.com" OR sourcehostname CONTAINS "http://realmoneycreate.xyz" OR sourcehostname CONTAINS "http://thehomenow.xyz" OR sourcehostname CONTAINS "http://real-enter-solutions.xyz" OR sourcehostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://jordanserver232.com" OR destinationntdomain CONTAINS "http://realacademicmediausa.com" OR destinationntdomain CONTAINS "http://topexpertshop.com" OR destinationntdomain CONTAINS "http://realmoneycreate.xyz" OR destinationntdomain CONTAINS "http://thehomenow.xyz" OR destinationntdomain CONTAINS "http://real-enter-solutions.xyz" OR destinationntdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://jordanserver232.com" OR destinationhostname CONTAINS "http://realacademicmediausa.com" OR destinationhostname CONTAINS "http://topexpertshop.com" OR destinationhostname CONTAINS "http://realmoneycreate.xyz" OR destinationhostname CONTAINS "http://thehomenow.xyz" OR destinationhostname CONTAINS "http://real-enter-solutions.xyz" OR destinationhostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://jordanserver232.com" OR sourcentdomain CONTAINS "http://realacademicmediausa.com" OR sourcentdomain CONTAINS "http://topexpertshop.com" OR sourcentdomain CONTAINS "http://realmoneycreate.xyz" OR sourcentdomain CONTAINS "http://thehomenow.xyz" OR sourcentdomain CONTAINS "http://real-enter-solutions.xyz" OR sourcentdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://jordanserver232.com" OR sourcehostname CONTAINS "http://realacademicmediausa.com" OR sourcehostname CONTAINS "http://topexpertshop.com" OR sourcehostname CONTAINS "http://realmoneycreate.xyz" OR sourcehostname CONTAINS "http://thehomenow.xyz" OR sourcehostname CONTAINS "http://real-enter-solutions.xyz" OR sourcehostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://jordanserver232.com" OR destinationntdomain CONTAINS "http://realacademicmediausa.com" OR destinationntdomain CONTAINS "http://topexpertshop.com" OR destinationntdomain CONTAINS "http://realmoneycreate.xyz" OR destinationntdomain CONTAINS "http://thehomenow.xyz" OR destinationntdomain CONTAINS "http://real-enter-solutions.xyz" OR destinationntdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://jordanserver232.com" OR destinationhostname CONTAINS "http://realacademicmediausa.com" OR destinationhostname CONTAINS "http://topexpertshop.com" OR destinationhostname CONTAINS "http://realmoneycreate.xyz" OR destinationhostname CONTAINS "http://thehomenow.xyz" OR destinationhostname CONTAINS "http://real-enter-solutions.xyz" OR destinationhostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://jordanserver232.com" OR sourcentdomain CONTAINS "http://realacademicmediausa.com" OR sourcentdomain CONTAINS "http://topexpertshop.com" OR sourcentdomain CONTAINS "http://realmoneycreate.xyz" OR sourcentdomain CONTAINS "http://thehomenow.xyz" OR sourcentdomain CONTAINS "http://real-enter-solutions.xyz" OR sourcentdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://jordanserver232.com" OR sourcehostname CONTAINS "http://realacademicmediausa.com" OR sourcehostname CONTAINS "http://topexpertshop.com" OR sourcehostname CONTAINS "http://realmoneycreate.xyz" OR sourcehostname CONTAINS "http://thehomenow.xyz" OR sourcehostname CONTAINS "http://real-enter-solutions.xyz" OR sourcehostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://jordanserver232.com" OR destinationntdomain CONTAINS "http://realacademicmediausa.com" OR destinationntdomain CONTAINS "http://topexpertshop.com" OR destinationntdomain CONTAINS "http://realmoneycreate.xyz" OR destinationntdomain CONTAINS "http://thehomenow.xyz" OR destinationntdomain CONTAINS "http://real-enter-solutions.xyz" OR destinationntdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://jordanserver232.com" OR destinationhostname CONTAINS "http://realacademicmediausa.com" OR destinationhostname CONTAINS "http://topexpertshop.com" OR destinationhostname CONTAINS "http://realmoneycreate.xyz" OR destinationhostname CONTAINS "http://thehomenow.xyz" OR destinationhostname CONTAINS "http://real-enter-solutions.xyz" OR destinationhostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://jordanserver232.com" OR sourcentdomain CONTAINS "http://realacademicmediausa.com" OR sourcentdomain CONTAINS "http://topexpertshop.com" OR sourcentdomain CONTAINS "http://realmoneycreate.xyz" OR sourcentdomain CONTAINS "http://thehomenow.xyz" OR sourcentdomain CONTAINS "http://real-enter-solutions.xyz" OR sourcentdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://jordanserver232.com" OR sourcehostname CONTAINS "http://realacademicmediausa.com" OR sourcehostname CONTAINS "http://topexpertshop.com" OR sourcehostname CONTAINS "http://realmoneycreate.xyz" OR sourcehostname CONTAINS "http://thehomenow.xyz" OR sourcehostname CONTAINS "http://real-enter-solutions.xyz" OR sourcehostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://jordanserver232.com" OR destinationntdomain CONTAINS "http://realacademicmediausa.com" OR destinationntdomain CONTAINS "http://topexpertshop.com" OR destinationntdomain CONTAINS "http://realmoneycreate.xyz" OR destinationntdomain CONTAINS "http://thehomenow.xyz" OR destinationntdomain CONTAINS "http://real-enter-solutions.xyz" OR destinationntdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://jordanserver232.com" OR destinationhostname CONTAINS "http://realacademicmediausa.com" OR destinationhostname CONTAINS "http://topexpertshop.com" OR destinationhostname CONTAINS "http://realmoneycreate.xyz" OR destinationhostname CONTAINS "http://thehomenow.xyz" OR destinationhostname CONTAINS "http://real-enter-solutions.xyz" OR destinationhostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://jordanserver232.com" OR sourcentdomain CONTAINS "http://realacademicmediausa.com" OR sourcentdomain CONTAINS "http://topexpertshop.com" OR sourcentdomain CONTAINS "http://realmoneycreate.xyz" OR sourcentdomain CONTAINS "http://thehomenow.xyz" OR sourcentdomain CONTAINS "http://real-enter-solutions.xyz" OR sourcentdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://jordanserver232.com" OR sourcehostname CONTAINS "http://realacademicmediausa.com" OR sourcehostname CONTAINS "http://topexpertshop.com" OR sourcehostname CONTAINS "http://realmoneycreate.xyz" OR sourcehostname CONTAINS "http://thehomenow.xyz" OR sourcehostname CONTAINS "http://real-enter-solutions.xyz" OR sourcehostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://jordanserver232.com" OR destinationntdomain CONTAINS "http://realacademicmediausa.com" OR destinationntdomain CONTAINS "http://topexpertshop.com" OR destinationntdomain CONTAINS "http://realmoneycreate.xyz" OR destinationntdomain CONTAINS "http://thehomenow.xyz" OR destinationntdomain CONTAINS "http://real-enter-solutions.xyz" OR destinationntdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://jordanserver232.com" OR destinationhostname CONTAINS "http://realacademicmediausa.com" OR destinationhostname CONTAINS "http://topexpertshop.com" OR destinationhostname CONTAINS "http://realmoneycreate.xyz" OR destinationhostname CONTAINS "http://thehomenow.xyz" OR destinationhostname CONTAINS "http://real-enter-solutions.xyz" OR destinationhostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://jordanserver232.com" OR sourcentdomain CONTAINS "http://realacademicmediausa.com" OR sourcentdomain CONTAINS "http://topexpertshop.com" OR sourcentdomain CONTAINS "http://realmoneycreate.xyz" OR sourcentdomain CONTAINS "http://thehomenow.xyz" OR sourcentdomain CONTAINS "http://real-enter-solutions.xyz" OR sourcentdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://jordanserver232.com" OR sourcehostname CONTAINS "http://realacademicmediausa.com" OR sourcehostname CONTAINS "http://topexpertshop.com" OR sourcehostname CONTAINS "http://realmoneycreate.xyz" OR sourcehostname CONTAINS "http://thehomenow.xyz" OR sourcehostname CONTAINS "http://real-enter-solutions.xyz" OR sourcehostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://jordanserver232.com" OR destinationntdomain CONTAINS "http://realacademicmediausa.com" OR destinationntdomain CONTAINS "http://topexpertshop.com" OR destinationntdomain CONTAINS "http://realmoneycreate.xyz" OR destinationntdomain CONTAINS "http://thehomenow.xyz" OR destinationntdomain CONTAINS "http://real-enter-solutions.xyz" OR destinationntdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://jordanserver232.com" OR destinationhostname CONTAINS "http://realacademicmediausa.com" OR destinationhostname CONTAINS "http://topexpertshop.com" OR destinationhostname CONTAINS "http://realmoneycreate.xyz" OR destinationhostname CONTAINS "http://thehomenow.xyz" OR destinationhostname CONTAINS "http://real-enter-solutions.xyz" OR destinationhostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://jordanserver232.com" OR sourcentdomain CONTAINS "http://realacademicmediausa.com" OR sourcentdomain CONTAINS "http://topexpertshop.com" OR sourcentdomain CONTAINS "http://realmoneycreate.xyz" OR sourcentdomain CONTAINS "http://thehomenow.xyz" OR sourcentdomain CONTAINS "http://real-enter-solutions.xyz" OR sourcentdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://jordanserver232.com" OR sourcehostname CONTAINS "http://realacademicmediausa.com" OR sourcehostname CONTAINS "http://topexpertshop.com" OR sourcehostname CONTAINS "http://realmoneycreate.xyz" OR sourcehostname CONTAINS "http://thehomenow.xyz" OR sourcehostname CONTAINS "http://real-enter-solutions.xyz" OR sourcehostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://jordanserver232.com" OR destinationntdomain CONTAINS "http://realacademicmediausa.com" OR destinationntdomain CONTAINS "http://topexpertshop.com" OR destinationntdomain CONTAINS "http://realmoneycreate.xyz" OR destinationntdomain CONTAINS "http://thehomenow.xyz" OR destinationntdomain CONTAINS "http://real-enter-solutions.xyz" OR destinationntdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://jordanserver232.com" OR destinationhostname CONTAINS "http://realacademicmediausa.com" OR destinationhostname CONTAINS "http://topexpertshop.com" OR destinationhostname CONTAINS "http://realmoneycreate.xyz" OR destinationhostname CONTAINS "http://thehomenow.xyz" OR destinationhostname CONTAINS "http://real-enter-solutions.xyz" OR destinationhostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://jordanserver232.com" OR sourcentdomain CONTAINS "http://realacademicmediausa.com" OR sourcentdomain CONTAINS "http://topexpertshop.com" OR sourcentdomain CONTAINS "http://realmoneycreate.xyz" OR sourcentdomain CONTAINS "http://thehomenow.xyz" OR sourcentdomain CONTAINS "http://real-enter-solutions.xyz" OR sourcentdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://jordanserver232.com" OR sourcehostname CONTAINS "http://realacademicmediausa.com" OR sourcehostname CONTAINS "http://topexpertshop.com" OR sourcehostname CONTAINS "http://realmoneycreate.xyz" OR sourcehostname CONTAINS "http://thehomenow.xyz" OR sourcehostname CONTAINS "http://real-enter-solutions.xyz" OR sourcehostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://jordanserver232.com" OR destinationntdomain CONTAINS "http://realacademicmediausa.com" OR destinationntdomain CONTAINS "http://topexpertshop.com" OR destinationntdomain CONTAINS "http://realmoneycreate.xyz" OR destinationntdomain CONTAINS "http://thehomenow.xyz" OR destinationntdomain CONTAINS "http://real-enter-solutions.xyz" OR destinationntdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://jordanserver232.com" OR destinationhostname CONTAINS "http://realacademicmediausa.com" OR destinationhostname CONTAINS "http://topexpertshop.com" OR destinationhostname CONTAINS "http://realmoneycreate.xyz" OR destinationhostname CONTAINS "http://thehomenow.xyz" OR destinationhostname CONTAINS "http://real-enter-solutions.xyz" OR destinationhostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://jordanserver232.com" OR sourcentdomain CONTAINS "http://realacademicmediausa.com" OR sourcentdomain CONTAINS "http://topexpertshop.com" OR sourcentdomain CONTAINS "http://realmoneycreate.xyz" OR sourcentdomain CONTAINS "http://thehomenow.xyz" OR sourcentdomain CONTAINS "http://real-enter-solutions.xyz" OR sourcentdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://jordanserver232.com" OR sourcehostname CONTAINS "http://realacademicmediausa.com" OR sourcehostname CONTAINS "http://topexpertshop.com" OR sourcehostname CONTAINS "http://realmoneycreate.xyz" OR sourcehostname CONTAINS "http://thehomenow.xyz" OR sourcehostname CONTAINS "http://real-enter-solutions.xyz" OR sourcehostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://jordanserver232.com" OR destinationntdomain CONTAINS "http://realacademicmediausa.com" OR destinationntdomain CONTAINS "http://topexpertshop.com" OR destinationntdomain CONTAINS "http://realmoneycreate.xyz" OR destinationntdomain CONTAINS "http://thehomenow.xyz" OR destinationntdomain CONTAINS "http://real-enter-solutions.xyz" OR destinationntdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://jordanserver232.com" OR destinationhostname CONTAINS "http://realacademicmediausa.com" OR destinationhostname CONTAINS "http://topexpertshop.com" OR destinationhostname CONTAINS "http://realmoneycreate.xyz" OR destinationhostname CONTAINS "http://thehomenow.xyz" OR destinationhostname CONTAINS "http://real-enter-solutions.xyz" OR destinationhostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://jordanserver232.com" OR sourcentdomain CONTAINS "http://realacademicmediausa.com" OR sourcentdomain CONTAINS "http://topexpertshop.com" OR sourcentdomain CONTAINS "http://realmoneycreate.xyz" OR sourcentdomain CONTAINS "http://thehomenow.xyz" OR sourcentdomain CONTAINS "http://real-enter-solutions.xyz" OR sourcentdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://jordanserver232.com" OR sourcehostname CONTAINS "http://realacademicmediausa.com" OR sourcehostname CONTAINS "http://topexpertshop.com" OR sourcehostname CONTAINS "http://realmoneycreate.xyz" OR sourcehostname CONTAINS "http://thehomenow.xyz" OR sourcehostname CONTAINS "http://real-enter-solutions.xyz" OR sourcehostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://jordanserver232.com" OR destinationntdomain CONTAINS "http://realacademicmediausa.com" OR destinationntdomain CONTAINS "http://topexpertshop.com" OR destinationntdomain CONTAINS "http://realmoneycreate.xyz" OR destinationntdomain CONTAINS "http://thehomenow.xyz" OR destinationntdomain CONTAINS "http://real-enter-solutions.xyz" OR destinationntdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://jordanserver232.com" OR destinationhostname CONTAINS "http://realacademicmediausa.com" OR destinationhostname CONTAINS "http://topexpertshop.com" OR destinationhostname CONTAINS "http://realmoneycreate.xyz" OR destinationhostname CONTAINS "http://thehomenow.xyz" OR destinationhostname CONTAINS "http://real-enter-solutions.xyz" OR destinationhostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://jordanserver232.com" OR sourcentdomain CONTAINS "http://realacademicmediausa.com" OR sourcentdomain CONTAINS "http://topexpertshop.com" OR sourcentdomain CONTAINS "http://realmoneycreate.xyz" OR sourcentdomain CONTAINS "http://thehomenow.xyz" OR sourcentdomain CONTAINS "http://real-enter-solutions.xyz" OR sourcentdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://jordanserver232.com" OR sourcehostname CONTAINS "http://realacademicmediausa.com" OR sourcehostname CONTAINS "http://topexpertshop.com" OR sourcehostname CONTAINS "http://realmoneycreate.xyz" OR sourcehostname CONTAINS "http://thehomenow.xyz" OR sourcehostname CONTAINS "http://real-enter-solutions.xyz" OR sourcehostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://jordanserver232.com" OR destinationntdomain CONTAINS "http://realacademicmediausa.com" OR destinationntdomain CONTAINS "http://topexpertshop.com" OR destinationntdomain CONTAINS "http://realmoneycreate.xyz" OR destinationntdomain CONTAINS "http://thehomenow.xyz" OR destinationntdomain CONTAINS "http://real-enter-solutions.xyz" OR destinationntdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://jordanserver232.com" OR destinationhostname CONTAINS "http://realacademicmediausa.com" OR destinationhostname CONTAINS "http://topexpertshop.com" OR destinationhostname CONTAINS "http://realmoneycreate.xyz" OR destinationhostname CONTAINS "http://thehomenow.xyz" OR destinationhostname CONTAINS "http://real-enter-solutions.xyz" OR destinationhostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://jordanserver232.com" OR sourcentdomain CONTAINS "http://realacademicmediausa.com" OR sourcentdomain CONTAINS "http://topexpertshop.com" OR sourcentdomain CONTAINS "http://realmoneycreate.xyz" OR sourcentdomain CONTAINS "http://thehomenow.xyz" OR sourcentdomain CONTAINS "http://real-enter-solutions.xyz" OR sourcentdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://jordanserver232.com" OR sourcehostname CONTAINS "http://realacademicmediausa.com" OR sourcehostname CONTAINS "http://topexpertshop.com" OR sourcehostname CONTAINS "http://realmoneycreate.xyz" OR sourcehostname CONTAINS "http://thehomenow.xyz" OR sourcehostname CONTAINS "http://real-enter-solutions.xyz" OR sourcehostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://jordanserver232.com" OR destinationntdomain CONTAINS "http://realacademicmediausa.com" OR destinationntdomain CONTAINS "http://topexpertshop.com" OR destinationntdomain CONTAINS "http://realmoneycreate.xyz" OR destinationntdomain CONTAINS "http://thehomenow.xyz" OR destinationntdomain CONTAINS "http://real-enter-solutions.xyz" OR destinationntdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://jordanserver232.com" OR destinationhostname CONTAINS "http://realacademicmediausa.com" OR destinationhostname CONTAINS "http://topexpertshop.com" OR destinationhostname CONTAINS "http://realmoneycreate.xyz" OR destinationhostname CONTAINS "http://thehomenow.xyz" OR destinationhostname CONTAINS "http://real-enter-solutions.xyz" OR destinationhostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://jordanserver232.com" OR sourcentdomain CONTAINS "http://realacademicmediausa.com" OR sourcentdomain CONTAINS "http://topexpertshop.com" OR sourcentdomain CONTAINS "http://realmoneycreate.xyz" OR sourcentdomain CONTAINS "http://thehomenow.xyz" OR sourcentdomain CONTAINS "http://real-enter-solutions.xyz" OR sourcentdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://jordanserver232.com" OR sourcehostname CONTAINS "http://realacademicmediausa.com" OR sourcehostname CONTAINS "http://topexpertshop.com" OR sourcehostname CONTAINS "http://realmoneycreate.xyz" OR sourcehostname CONTAINS "http://thehomenow.xyz" OR sourcehostname CONTAINS "http://real-enter-solutions.xyz" OR sourcehostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://jordanserver232.com" OR destinationntdomain CONTAINS "http://realacademicmediausa.com" OR destinationntdomain CONTAINS "http://topexpertshop.com" OR destinationntdomain CONTAINS "http://realmoneycreate.xyz" OR destinationntdomain CONTAINS "http://thehomenow.xyz" OR destinationntdomain CONTAINS "http://real-enter-solutions.xyz" OR destinationntdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://jordanserver232.com" OR destinationhostname CONTAINS "http://realacademicmediausa.com" OR destinationhostname CONTAINS "http://topexpertshop.com" OR destinationhostname CONTAINS "http://realmoneycreate.xyz" OR destinationhostname CONTAINS "http://thehomenow.xyz" OR destinationhostname CONTAINS "http://real-enter-solutions.xyz" OR destinationhostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://jordanserver232.com" OR sourcentdomain CONTAINS "http://realacademicmediausa.com" OR sourcentdomain CONTAINS "http://topexpertshop.com" OR sourcentdomain CONTAINS "http://realmoneycreate.xyz" OR sourcentdomain CONTAINS "http://thehomenow.xyz" OR sourcentdomain CONTAINS "http://real-enter-solutions.xyz" OR sourcentdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://jordanserver232.com" OR sourcehostname CONTAINS "http://realacademicmediausa.com" OR sourcehostname CONTAINS "http://topexpertshop.com" OR sourcehostname CONTAINS "http://realmoneycreate.xyz" OR sourcehostname CONTAINS "http://thehomenow.xyz" OR sourcehostname CONTAINS "http://real-enter-solutions.xyz" OR sourcehostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://jordanserver232.com" OR destinationntdomain CONTAINS "http://realacademicmediausa.com" OR destinationntdomain CONTAINS "http://topexpertshop.com" OR destinationntdomain CONTAINS "http://realmoneycreate.xyz" OR destinationntdomain CONTAINS "http://thehomenow.xyz" OR destinationntdomain CONTAINS "http://real-enter-solutions.xyz" OR destinationntdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://jordanserver232.com" OR destinationhostname CONTAINS "http://realacademicmediausa.com" OR destinationhostname CONTAINS "http://topexpertshop.com" OR destinationhostname CONTAINS "http://realmoneycreate.xyz" OR destinationhostname CONTAINS "http://thehomenow.xyz" OR destinationhostname CONTAINS "http://real-enter-solutions.xyz" OR destinationhostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://jordanserver232.com" OR sourcentdomain CONTAINS "http://realacademicmediausa.com" OR sourcentdomain CONTAINS "http://topexpertshop.com" OR sourcentdomain CONTAINS "http://realmoneycreate.xyz" OR sourcentdomain CONTAINS "http://thehomenow.xyz" OR sourcentdomain CONTAINS "http://real-enter-solutions.xyz" OR sourcentdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://jordanserver232.com" OR sourcehostname CONTAINS "http://realacademicmediausa.com" OR sourcehostname CONTAINS "http://topexpertshop.com" OR sourcehostname CONTAINS "http://realmoneycreate.xyz" OR sourcehostname CONTAINS "http://thehomenow.xyz" OR sourcehostname CONTAINS "http://real-enter-solutions.xyz" OR sourcehostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://jordanserver232.com" OR destinationntdomain CONTAINS "http://realacademicmediausa.com" OR destinationntdomain CONTAINS "http://topexpertshop.com" OR destinationntdomain CONTAINS "http://realmoneycreate.xyz" OR destinationntdomain CONTAINS "http://thehomenow.xyz" OR destinationntdomain CONTAINS "http://real-enter-solutions.xyz" OR destinationntdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://jordanserver232.com" OR destinationhostname CONTAINS "http://realacademicmediausa.com" OR destinationhostname CONTAINS "http://topexpertshop.com" OR destinationhostname CONTAINS "http://realmoneycreate.xyz" OR destinationhostname CONTAINS "http://thehomenow.xyz" OR destinationhostname CONTAINS "http://real-enter-solutions.xyz" OR destinationhostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://jordanserver232.com" OR sourcentdomain CONTAINS "http://realacademicmediausa.com" OR sourcentdomain CONTAINS "http://topexpertshop.com" OR sourcentdomain CONTAINS "http://realmoneycreate.xyz" OR sourcentdomain CONTAINS "http://thehomenow.xyz" OR sourcentdomain CONTAINS "http://real-enter-solutions.xyz" OR sourcentdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://jordanserver232.com" OR sourcehostname CONTAINS "http://realacademicmediausa.com" OR sourcehostname CONTAINS "http://topexpertshop.com" OR sourcehostname CONTAINS "http://realmoneycreate.xyz" OR sourcehostname CONTAINS "http://thehomenow.xyz" OR sourcehostname CONTAINS "http://real-enter-solutions.xyz" OR sourcehostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://jordanserver232.com" OR destinationntdomain CONTAINS "http://realacademicmediausa.com" OR destinationntdomain CONTAINS "http://topexpertshop.com" OR destinationntdomain CONTAINS "http://realmoneycreate.xyz" OR destinationntdomain CONTAINS "http://thehomenow.xyz" OR destinationntdomain CONTAINS "http://real-enter-solutions.xyz" OR destinationntdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://jordanserver232.com" OR destinationhostname CONTAINS "http://realacademicmediausa.com" OR destinationhostname CONTAINS "http://topexpertshop.com" OR destinationhostname CONTAINS "http://realmoneycreate.xyz" OR destinationhostname CONTAINS "http://thehomenow.xyz" OR destinationhostname CONTAINS "http://real-enter-solutions.xyz" OR destinationhostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://jordanserver232.com" OR sourcentdomain CONTAINS "http://realacademicmediausa.com" OR sourcentdomain CONTAINS "http://topexpertshop.com" OR sourcentdomain CONTAINS "http://realmoneycreate.xyz" OR sourcentdomain CONTAINS "http://thehomenow.xyz" OR sourcentdomain CONTAINS "http://real-enter-solutions.xyz" OR sourcentdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://jordanserver232.com" OR sourcehostname CONTAINS "http://realacademicmediausa.com" OR sourcehostname CONTAINS "http://topexpertshop.com" OR sourcehostname CONTAINS "http://realmoneycreate.xyz" OR sourcehostname CONTAINS "http://thehomenow.xyz" OR sourcehostname CONTAINS "http://real-enter-solutions.xyz" OR sourcehostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://jordanserver232.com" OR destinationntdomain CONTAINS "http://realacademicmediausa.com" OR destinationntdomain CONTAINS "http://topexpertshop.com" OR destinationntdomain CONTAINS "http://realmoneycreate.xyz" OR destinationntdomain CONTAINS "http://thehomenow.xyz" OR destinationntdomain CONTAINS "http://real-enter-solutions.xyz" OR destinationntdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://jordanserver232.com" OR destinationhostname CONTAINS "http://realacademicmediausa.com" OR destinationhostname CONTAINS "http://topexpertshop.com" OR destinationhostname CONTAINS "http://realmoneycreate.xyz" OR destinationhostname CONTAINS "http://thehomenow.xyz" OR destinationhostname CONTAINS "http://real-enter-solutions.xyz" OR destinationhostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://jordanserver232.com" OR sourcentdomain CONTAINS "http://realacademicmediausa.com" OR sourcentdomain CONTAINS "http://topexpertshop.com" OR sourcentdomain CONTAINS "http://realmoneycreate.xyz" OR sourcentdomain CONTAINS "http://thehomenow.xyz" OR sourcentdomain CONTAINS "http://real-enter-solutions.xyz" OR sourcentdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://jordanserver232.com" OR sourcehostname CONTAINS "http://realacademicmediausa.com" OR sourcehostname CONTAINS "http://topexpertshop.com" OR sourcehostname CONTAINS "http://realmoneycreate.xyz" OR sourcehostname CONTAINS "http://thehomenow.xyz" OR sourcehostname CONTAINS "http://real-enter-solutions.xyz" OR sourcehostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://jordanserver232.com" OR destinationntdomain CONTAINS "http://realacademicmediausa.com" OR destinationntdomain CONTAINS "http://topexpertshop.com" OR destinationntdomain CONTAINS "http://realmoneycreate.xyz" OR destinationntdomain CONTAINS "http://thehomenow.xyz" OR destinationntdomain CONTAINS "http://real-enter-solutions.xyz" OR destinationntdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://jordanserver232.com" OR destinationhostname CONTAINS "http://realacademicmediausa.com" OR destinationhostname CONTAINS "http://topexpertshop.com" OR destinationhostname CONTAINS "http://realmoneycreate.xyz" OR destinationhostname CONTAINS "http://thehomenow.xyz" OR destinationhostname CONTAINS "http://real-enter-solutions.xyz" OR destinationhostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://jordanserver232.com" OR sourcentdomain CONTAINS "http://realacademicmediausa.com" OR sourcentdomain CONTAINS "http://topexpertshop.com" OR sourcentdomain CONTAINS "http://realmoneycreate.xyz" OR sourcentdomain CONTAINS "http://thehomenow.xyz" OR sourcentdomain CONTAINS "http://real-enter-solutions.xyz" OR sourcentdomain CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://jordanserver232.com" OR sourcehostname CONTAINS "http://realacademicmediausa.com" OR sourcehostname CONTAINS "http://topexpertshop.com" OR sourcehostname CONTAINS "http://realmoneycreate.xyz" OR sourcehostname CONTAINS "http://thehomenow.xyz" OR sourcehostname CONTAINS "http://real-enter-solutions.xyz" OR sourcehostname CONTAINS "http://enter-me.xyz")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://jordanserver232.com" OR destinationntdomain CONTAINS "http://realacademicmediausa.com" OR destinationntdomain CONTAINS "http://topexpertshop.com" OR destinationntdomain CONTAINS "http://realmoneycreate.xyz" OR destinationntdomain CONTAINS "http://thehomenow.xyz" OR destinationntdomain CONTAINS "http://real-enter-solutions.xyz" OR destinationntdomain CONTAINS "http://enter-me.xyz")
