index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "myproject-login.shop" OR destinationhostname CONTAINS "mysite-log.shop" OR destinationhostname CONTAINS "supp-help.me" OR destinationhostname CONTAINS "account-noreply3.xyz" OR destinationhostname CONTAINS "goolge.ltd" OR destinationhostname CONTAINS "goolge.help" OR destinationhostname CONTAINS "account-noreply8.info" OR destinationhostname CONTAINS "account-server.xyz" OR destinationhostname CONTAINS "kcynvd-mail.com" OR destinationhostname CONTAINS "mail-goolge.com" OR destinationhostname CONTAINS "kcynve-mail.com" OR destinationhostname CONTAINS "dtiwa.app.link" OR destinationhostname CONTAINS "share-team.app.link" OR destinationhostname CONTAINS "mipim.app.link" OR destinationhostname CONTAINS "processs.app.link" OR destinationhostname CONTAINS "aws-amazon.app.ink" OR destinationhostname CONTAINS "clik.sbs" OR destinationhostname CONTAINS "loading.sbs" OR destinationhostname CONTAINS "userprofile.live" OR destinationhostname CONTAINS "requestservice.live" OR destinationhostname CONTAINS "unt-log.com" OR destinationhostname CONTAINS "webtech-portal.com" OR destinationhostname CONTAINS "id-apl.info" OR destinationhostname CONTAINS "rnanage-icloud.com" OR destinationhostname CONTAINS "apl.onl" OR destinationhostname CONTAINS "go-gl.io" OR destinationhostname CONTAINS "login-my-oauth-mail.ru" OR destinationhostname CONTAINS "oauth-login-accounts-mail.ru" OR destinationhostname CONTAINS "my-oauth-accounts-mail.ru" OR destinationhostname CONTAINS "login-cloud-myaccount-mail.ru" OR destinationhostname CONTAINS "myaccounts-auth.ru" OR destinationhostname CONTAINS "security-my-account.ru" OR destinationhostname CONTAINS "source-place-preference.ru" OR destinationhostname CONTAINS "safe-place-smartlink.ru" OR destinationhostname CONTAINS "safe-place-experience.ru" OR destinationhostname CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "myproject-login.shop" OR sourcentdomain CONTAINS "mysite-log.shop" OR sourcentdomain CONTAINS "supp-help.me" OR sourcentdomain CONTAINS "account-noreply3.xyz" OR sourcentdomain CONTAINS "goolge.ltd" OR sourcentdomain CONTAINS "goolge.help" OR sourcentdomain CONTAINS "account-noreply8.info" OR sourcentdomain CONTAINS "account-server.xyz" OR sourcentdomain CONTAINS "kcynvd-mail.com" OR sourcentdomain CONTAINS "mail-goolge.com" OR sourcentdomain CONTAINS "kcynve-mail.com" OR sourcentdomain CONTAINS "dtiwa.app.link" OR sourcentdomain CONTAINS "share-team.app.link" OR sourcentdomain CONTAINS "mipim.app.link" OR sourcentdomain CONTAINS "processs.app.link" OR sourcentdomain CONTAINS "aws-amazon.app.ink" OR sourcentdomain CONTAINS "clik.sbs" OR sourcentdomain CONTAINS "loading.sbs" OR sourcentdomain CONTAINS "userprofile.live" OR sourcentdomain CONTAINS "requestservice.live" OR sourcentdomain CONTAINS "unt-log.com" OR sourcentdomain CONTAINS "webtech-portal.com" OR sourcentdomain CONTAINS "id-apl.info" OR sourcentdomain CONTAINS "rnanage-icloud.com" OR sourcentdomain CONTAINS "apl.onl" OR sourcentdomain CONTAINS "go-gl.io" OR sourcentdomain CONTAINS "login-my-oauth-mail.ru" OR sourcentdomain CONTAINS "oauth-login-accounts-mail.ru" OR sourcentdomain CONTAINS "my-oauth-accounts-mail.ru" OR sourcentdomain CONTAINS "login-cloud-myaccount-mail.ru" OR sourcentdomain CONTAINS "myaccounts-auth.ru" OR sourcentdomain CONTAINS "security-my-account.ru" OR sourcentdomain CONTAINS "source-place-preference.ru" OR sourcentdomain CONTAINS "safe-place-smartlink.ru" OR sourcentdomain CONTAINS "safe-place-experience.ru" OR sourcentdomain CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "myproject-login.shop" OR sourcehostname CONTAINS "mysite-log.shop" OR sourcehostname CONTAINS "supp-help.me" OR sourcehostname CONTAINS "account-noreply3.xyz" OR sourcehostname CONTAINS "goolge.ltd" OR sourcehostname CONTAINS "goolge.help" OR sourcehostname CONTAINS "account-noreply8.info" OR sourcehostname CONTAINS "account-server.xyz" OR sourcehostname CONTAINS "kcynvd-mail.com" OR sourcehostname CONTAINS "mail-goolge.com" OR sourcehostname CONTAINS "kcynve-mail.com" OR sourcehostname CONTAINS "dtiwa.app.link" OR sourcehostname CONTAINS "share-team.app.link" OR sourcehostname CONTAINS "mipim.app.link" OR sourcehostname CONTAINS "processs.app.link" OR sourcehostname CONTAINS "aws-amazon.app.ink" OR sourcehostname CONTAINS "clik.sbs" OR sourcehostname CONTAINS "loading.sbs" OR sourcehostname CONTAINS "userprofile.live" OR sourcehostname CONTAINS "requestservice.live" OR sourcehostname CONTAINS "unt-log.com" OR sourcehostname CONTAINS "webtech-portal.com" OR sourcehostname CONTAINS "id-apl.info" OR sourcehostname CONTAINS "rnanage-icloud.com" OR sourcehostname CONTAINS "apl.onl" OR sourcehostname CONTAINS "go-gl.io" OR sourcehostname CONTAINS "login-my-oauth-mail.ru" OR sourcehostname CONTAINS "oauth-login-accounts-mail.ru" OR sourcehostname CONTAINS "my-oauth-accounts-mail.ru" OR sourcehostname CONTAINS "login-cloud-myaccount-mail.ru" OR sourcehostname CONTAINS "myaccounts-auth.ru" OR sourcehostname CONTAINS "security-my-account.ru" OR sourcehostname CONTAINS "source-place-preference.ru" OR sourcehostname CONTAINS "safe-place-smartlink.ru" OR sourcehostname CONTAINS "safe-place-experience.ru" OR sourcehostname CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "myproject-login.shop" OR destinationntdomain CONTAINS "mysite-log.shop" OR destinationntdomain CONTAINS "supp-help.me" OR destinationntdomain CONTAINS "account-noreply3.xyz" OR destinationntdomain CONTAINS "goolge.ltd" OR destinationntdomain CONTAINS "goolge.help" OR destinationntdomain CONTAINS "account-noreply8.info" OR destinationntdomain CONTAINS "account-server.xyz" OR destinationntdomain CONTAINS "kcynvd-mail.com" OR destinationntdomain CONTAINS "mail-goolge.com" OR destinationntdomain CONTAINS "kcynve-mail.com" OR destinationntdomain CONTAINS "dtiwa.app.link" OR destinationntdomain CONTAINS "share-team.app.link" OR destinationntdomain CONTAINS "mipim.app.link" OR destinationntdomain CONTAINS "processs.app.link" OR destinationntdomain CONTAINS "aws-amazon.app.ink" OR destinationntdomain CONTAINS "clik.sbs" OR destinationntdomain CONTAINS "loading.sbs" OR destinationntdomain CONTAINS "userprofile.live" OR destinationntdomain CONTAINS "requestservice.live" OR destinationntdomain CONTAINS "unt-log.com" OR destinationntdomain CONTAINS "webtech-portal.com" OR destinationntdomain CONTAINS "id-apl.info" OR destinationntdomain CONTAINS "rnanage-icloud.com" OR destinationntdomain CONTAINS "apl.onl" OR destinationntdomain CONTAINS "go-gl.io" OR destinationntdomain CONTAINS "login-my-oauth-mail.ru" OR destinationntdomain CONTAINS "oauth-login-accounts-mail.ru" OR destinationntdomain CONTAINS "my-oauth-accounts-mail.ru" OR destinationntdomain CONTAINS "login-cloud-myaccount-mail.ru" OR destinationntdomain CONTAINS "myaccounts-auth.ru" OR destinationntdomain CONTAINS "security-my-account.ru" OR destinationntdomain CONTAINS "source-place-preference.ru" OR destinationntdomain CONTAINS "safe-place-smartlink.ru" OR destinationntdomain CONTAINS "safe-place-experience.ru" OR destinationntdomain CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "myproject-login.shop" OR destinationhostname CONTAINS "mysite-log.shop" OR destinationhostname CONTAINS "supp-help.me" OR destinationhostname CONTAINS "account-noreply3.xyz" OR destinationhostname CONTAINS "goolge.ltd" OR destinationhostname CONTAINS "goolge.help" OR destinationhostname CONTAINS "account-noreply8.info" OR destinationhostname CONTAINS "account-server.xyz" OR destinationhostname CONTAINS "kcynvd-mail.com" OR destinationhostname CONTAINS "mail-goolge.com" OR destinationhostname CONTAINS "kcynve-mail.com" OR destinationhostname CONTAINS "dtiwa.app.link" OR destinationhostname CONTAINS "share-team.app.link" OR destinationhostname CONTAINS "mipim.app.link" OR destinationhostname CONTAINS "processs.app.link" OR destinationhostname CONTAINS "aws-amazon.app.ink" OR destinationhostname CONTAINS "clik.sbs" OR destinationhostname CONTAINS "loading.sbs" OR destinationhostname CONTAINS "userprofile.live" OR destinationhostname CONTAINS "requestservice.live" OR destinationhostname CONTAINS "unt-log.com" OR destinationhostname CONTAINS "webtech-portal.com" OR destinationhostname CONTAINS "id-apl.info" OR destinationhostname CONTAINS "rnanage-icloud.com" OR destinationhostname CONTAINS "apl.onl" OR destinationhostname CONTAINS "go-gl.io" OR destinationhostname CONTAINS "login-my-oauth-mail.ru" OR destinationhostname CONTAINS "oauth-login-accounts-mail.ru" OR destinationhostname CONTAINS "my-oauth-accounts-mail.ru" OR destinationhostname CONTAINS "login-cloud-myaccount-mail.ru" OR destinationhostname CONTAINS "myaccounts-auth.ru" OR destinationhostname CONTAINS "security-my-account.ru" OR destinationhostname CONTAINS "source-place-preference.ru" OR destinationhostname CONTAINS "safe-place-smartlink.ru" OR destinationhostname CONTAINS "safe-place-experience.ru" OR destinationhostname CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "myproject-login.shop" OR sourcentdomain CONTAINS "mysite-log.shop" OR sourcentdomain CONTAINS "supp-help.me" OR sourcentdomain CONTAINS "account-noreply3.xyz" OR sourcentdomain CONTAINS "goolge.ltd" OR sourcentdomain CONTAINS "goolge.help" OR sourcentdomain CONTAINS "account-noreply8.info" OR sourcentdomain CONTAINS "account-server.xyz" OR sourcentdomain CONTAINS "kcynvd-mail.com" OR sourcentdomain CONTAINS "mail-goolge.com" OR sourcentdomain CONTAINS "kcynve-mail.com" OR sourcentdomain CONTAINS "dtiwa.app.link" OR sourcentdomain CONTAINS "share-team.app.link" OR sourcentdomain CONTAINS "mipim.app.link" OR sourcentdomain CONTAINS "processs.app.link" OR sourcentdomain CONTAINS "aws-amazon.app.ink" OR sourcentdomain CONTAINS "clik.sbs" OR sourcentdomain CONTAINS "loading.sbs" OR sourcentdomain CONTAINS "userprofile.live" OR sourcentdomain CONTAINS "requestservice.live" OR sourcentdomain CONTAINS "unt-log.com" OR sourcentdomain CONTAINS "webtech-portal.com" OR sourcentdomain CONTAINS "id-apl.info" OR sourcentdomain CONTAINS "rnanage-icloud.com" OR sourcentdomain CONTAINS "apl.onl" OR sourcentdomain CONTAINS "go-gl.io" OR sourcentdomain CONTAINS "login-my-oauth-mail.ru" OR sourcentdomain CONTAINS "oauth-login-accounts-mail.ru" OR sourcentdomain CONTAINS "my-oauth-accounts-mail.ru" OR sourcentdomain CONTAINS "login-cloud-myaccount-mail.ru" OR sourcentdomain CONTAINS "myaccounts-auth.ru" OR sourcentdomain CONTAINS "security-my-account.ru" OR sourcentdomain CONTAINS "source-place-preference.ru" OR sourcentdomain CONTAINS "safe-place-smartlink.ru" OR sourcentdomain CONTAINS "safe-place-experience.ru" OR sourcentdomain CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "myproject-login.shop" OR sourcehostname CONTAINS "mysite-log.shop" OR sourcehostname CONTAINS "supp-help.me" OR sourcehostname CONTAINS "account-noreply3.xyz" OR sourcehostname CONTAINS "goolge.ltd" OR sourcehostname CONTAINS "goolge.help" OR sourcehostname CONTAINS "account-noreply8.info" OR sourcehostname CONTAINS "account-server.xyz" OR sourcehostname CONTAINS "kcynvd-mail.com" OR sourcehostname CONTAINS "mail-goolge.com" OR sourcehostname CONTAINS "kcynve-mail.com" OR sourcehostname CONTAINS "dtiwa.app.link" OR sourcehostname CONTAINS "share-team.app.link" OR sourcehostname CONTAINS "mipim.app.link" OR sourcehostname CONTAINS "processs.app.link" OR sourcehostname CONTAINS "aws-amazon.app.ink" OR sourcehostname CONTAINS "clik.sbs" OR sourcehostname CONTAINS "loading.sbs" OR sourcehostname CONTAINS "userprofile.live" OR sourcehostname CONTAINS "requestservice.live" OR sourcehostname CONTAINS "unt-log.com" OR sourcehostname CONTAINS "webtech-portal.com" OR sourcehostname CONTAINS "id-apl.info" OR sourcehostname CONTAINS "rnanage-icloud.com" OR sourcehostname CONTAINS "apl.onl" OR sourcehostname CONTAINS "go-gl.io" OR sourcehostname CONTAINS "login-my-oauth-mail.ru" OR sourcehostname CONTAINS "oauth-login-accounts-mail.ru" OR sourcehostname CONTAINS "my-oauth-accounts-mail.ru" OR sourcehostname CONTAINS "login-cloud-myaccount-mail.ru" OR sourcehostname CONTAINS "myaccounts-auth.ru" OR sourcehostname CONTAINS "security-my-account.ru" OR sourcehostname CONTAINS "source-place-preference.ru" OR sourcehostname CONTAINS "safe-place-smartlink.ru" OR sourcehostname CONTAINS "safe-place-experience.ru" OR sourcehostname CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "myproject-login.shop" OR destinationntdomain CONTAINS "mysite-log.shop" OR destinationntdomain CONTAINS "supp-help.me" OR destinationntdomain CONTAINS "account-noreply3.xyz" OR destinationntdomain CONTAINS "goolge.ltd" OR destinationntdomain CONTAINS "goolge.help" OR destinationntdomain CONTAINS "account-noreply8.info" OR destinationntdomain CONTAINS "account-server.xyz" OR destinationntdomain CONTAINS "kcynvd-mail.com" OR destinationntdomain CONTAINS "mail-goolge.com" OR destinationntdomain CONTAINS "kcynve-mail.com" OR destinationntdomain CONTAINS "dtiwa.app.link" OR destinationntdomain CONTAINS "share-team.app.link" OR destinationntdomain CONTAINS "mipim.app.link" OR destinationntdomain CONTAINS "processs.app.link" OR destinationntdomain CONTAINS "aws-amazon.app.ink" OR destinationntdomain CONTAINS "clik.sbs" OR destinationntdomain CONTAINS "loading.sbs" OR destinationntdomain CONTAINS "userprofile.live" OR destinationntdomain CONTAINS "requestservice.live" OR destinationntdomain CONTAINS "unt-log.com" OR destinationntdomain CONTAINS "webtech-portal.com" OR destinationntdomain CONTAINS "id-apl.info" OR destinationntdomain CONTAINS "rnanage-icloud.com" OR destinationntdomain CONTAINS "apl.onl" OR destinationntdomain CONTAINS "go-gl.io" OR destinationntdomain CONTAINS "login-my-oauth-mail.ru" OR destinationntdomain CONTAINS "oauth-login-accounts-mail.ru" OR destinationntdomain CONTAINS "my-oauth-accounts-mail.ru" OR destinationntdomain CONTAINS "login-cloud-myaccount-mail.ru" OR destinationntdomain CONTAINS "myaccounts-auth.ru" OR destinationntdomain CONTAINS "security-my-account.ru" OR destinationntdomain CONTAINS "source-place-preference.ru" OR destinationntdomain CONTAINS "safe-place-smartlink.ru" OR destinationntdomain CONTAINS "safe-place-experience.ru" OR destinationntdomain CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "myproject-login.shop" OR destinationhostname CONTAINS "mysite-log.shop" OR destinationhostname CONTAINS "supp-help.me" OR destinationhostname CONTAINS "account-noreply3.xyz" OR destinationhostname CONTAINS "goolge.ltd" OR destinationhostname CONTAINS "goolge.help" OR destinationhostname CONTAINS "account-noreply8.info" OR destinationhostname CONTAINS "account-server.xyz" OR destinationhostname CONTAINS "kcynvd-mail.com" OR destinationhostname CONTAINS "mail-goolge.com" OR destinationhostname CONTAINS "kcynve-mail.com" OR destinationhostname CONTAINS "dtiwa.app.link" OR destinationhostname CONTAINS "share-team.app.link" OR destinationhostname CONTAINS "mipim.app.link" OR destinationhostname CONTAINS "processs.app.link" OR destinationhostname CONTAINS "aws-amazon.app.ink" OR destinationhostname CONTAINS "clik.sbs" OR destinationhostname CONTAINS "loading.sbs" OR destinationhostname CONTAINS "userprofile.live" OR destinationhostname CONTAINS "requestservice.live" OR destinationhostname CONTAINS "unt-log.com" OR destinationhostname CONTAINS "webtech-portal.com" OR destinationhostname CONTAINS "id-apl.info" OR destinationhostname CONTAINS "rnanage-icloud.com" OR destinationhostname CONTAINS "apl.onl" OR destinationhostname CONTAINS "go-gl.io" OR destinationhostname CONTAINS "login-my-oauth-mail.ru" OR destinationhostname CONTAINS "oauth-login-accounts-mail.ru" OR destinationhostname CONTAINS "my-oauth-accounts-mail.ru" OR destinationhostname CONTAINS "login-cloud-myaccount-mail.ru" OR destinationhostname CONTAINS "myaccounts-auth.ru" OR destinationhostname CONTAINS "security-my-account.ru" OR destinationhostname CONTAINS "source-place-preference.ru" OR destinationhostname CONTAINS "safe-place-smartlink.ru" OR destinationhostname CONTAINS "safe-place-experience.ru" OR destinationhostname CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "myproject-login.shop" OR sourcentdomain CONTAINS "mysite-log.shop" OR sourcentdomain CONTAINS "supp-help.me" OR sourcentdomain CONTAINS "account-noreply3.xyz" OR sourcentdomain CONTAINS "goolge.ltd" OR sourcentdomain CONTAINS "goolge.help" OR sourcentdomain CONTAINS "account-noreply8.info" OR sourcentdomain CONTAINS "account-server.xyz" OR sourcentdomain CONTAINS "kcynvd-mail.com" OR sourcentdomain CONTAINS "mail-goolge.com" OR sourcentdomain CONTAINS "kcynve-mail.com" OR sourcentdomain CONTAINS "dtiwa.app.link" OR sourcentdomain CONTAINS "share-team.app.link" OR sourcentdomain CONTAINS "mipim.app.link" OR sourcentdomain CONTAINS "processs.app.link" OR sourcentdomain CONTAINS "aws-amazon.app.ink" OR sourcentdomain CONTAINS "clik.sbs" OR sourcentdomain CONTAINS "loading.sbs" OR sourcentdomain CONTAINS "userprofile.live" OR sourcentdomain CONTAINS "requestservice.live" OR sourcentdomain CONTAINS "unt-log.com" OR sourcentdomain CONTAINS "webtech-portal.com" OR sourcentdomain CONTAINS "id-apl.info" OR sourcentdomain CONTAINS "rnanage-icloud.com" OR sourcentdomain CONTAINS "apl.onl" OR sourcentdomain CONTAINS "go-gl.io" OR sourcentdomain CONTAINS "login-my-oauth-mail.ru" OR sourcentdomain CONTAINS "oauth-login-accounts-mail.ru" OR sourcentdomain CONTAINS "my-oauth-accounts-mail.ru" OR sourcentdomain CONTAINS "login-cloud-myaccount-mail.ru" OR sourcentdomain CONTAINS "myaccounts-auth.ru" OR sourcentdomain CONTAINS "security-my-account.ru" OR sourcentdomain CONTAINS "source-place-preference.ru" OR sourcentdomain CONTAINS "safe-place-smartlink.ru" OR sourcentdomain CONTAINS "safe-place-experience.ru" OR sourcentdomain CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "myproject-login.shop" OR sourcehostname CONTAINS "mysite-log.shop" OR sourcehostname CONTAINS "supp-help.me" OR sourcehostname CONTAINS "account-noreply3.xyz" OR sourcehostname CONTAINS "goolge.ltd" OR sourcehostname CONTAINS "goolge.help" OR sourcehostname CONTAINS "account-noreply8.info" OR sourcehostname CONTAINS "account-server.xyz" OR sourcehostname CONTAINS "kcynvd-mail.com" OR sourcehostname CONTAINS "mail-goolge.com" OR sourcehostname CONTAINS "kcynve-mail.com" OR sourcehostname CONTAINS "dtiwa.app.link" OR sourcehostname CONTAINS "share-team.app.link" OR sourcehostname CONTAINS "mipim.app.link" OR sourcehostname CONTAINS "processs.app.link" OR sourcehostname CONTAINS "aws-amazon.app.ink" OR sourcehostname CONTAINS "clik.sbs" OR sourcehostname CONTAINS "loading.sbs" OR sourcehostname CONTAINS "userprofile.live" OR sourcehostname CONTAINS "requestservice.live" OR sourcehostname CONTAINS "unt-log.com" OR sourcehostname CONTAINS "webtech-portal.com" OR sourcehostname CONTAINS "id-apl.info" OR sourcehostname CONTAINS "rnanage-icloud.com" OR sourcehostname CONTAINS "apl.onl" OR sourcehostname CONTAINS "go-gl.io" OR sourcehostname CONTAINS "login-my-oauth-mail.ru" OR sourcehostname CONTAINS "oauth-login-accounts-mail.ru" OR sourcehostname CONTAINS "my-oauth-accounts-mail.ru" OR sourcehostname CONTAINS "login-cloud-myaccount-mail.ru" OR sourcehostname CONTAINS "myaccounts-auth.ru" OR sourcehostname CONTAINS "security-my-account.ru" OR sourcehostname CONTAINS "source-place-preference.ru" OR sourcehostname CONTAINS "safe-place-smartlink.ru" OR sourcehostname CONTAINS "safe-place-experience.ru" OR sourcehostname CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "myproject-login.shop" OR destinationntdomain CONTAINS "mysite-log.shop" OR destinationntdomain CONTAINS "supp-help.me" OR destinationntdomain CONTAINS "account-noreply3.xyz" OR destinationntdomain CONTAINS "goolge.ltd" OR destinationntdomain CONTAINS "goolge.help" OR destinationntdomain CONTAINS "account-noreply8.info" OR destinationntdomain CONTAINS "account-server.xyz" OR destinationntdomain CONTAINS "kcynvd-mail.com" OR destinationntdomain CONTAINS "mail-goolge.com" OR destinationntdomain CONTAINS "kcynve-mail.com" OR destinationntdomain CONTAINS "dtiwa.app.link" OR destinationntdomain CONTAINS "share-team.app.link" OR destinationntdomain CONTAINS "mipim.app.link" OR destinationntdomain CONTAINS "processs.app.link" OR destinationntdomain CONTAINS "aws-amazon.app.ink" OR destinationntdomain CONTAINS "clik.sbs" OR destinationntdomain CONTAINS "loading.sbs" OR destinationntdomain CONTAINS "userprofile.live" OR destinationntdomain CONTAINS "requestservice.live" OR destinationntdomain CONTAINS "unt-log.com" OR destinationntdomain CONTAINS "webtech-portal.com" OR destinationntdomain CONTAINS "id-apl.info" OR destinationntdomain CONTAINS "rnanage-icloud.com" OR destinationntdomain CONTAINS "apl.onl" OR destinationntdomain CONTAINS "go-gl.io" OR destinationntdomain CONTAINS "login-my-oauth-mail.ru" OR destinationntdomain CONTAINS "oauth-login-accounts-mail.ru" OR destinationntdomain CONTAINS "my-oauth-accounts-mail.ru" OR destinationntdomain CONTAINS "login-cloud-myaccount-mail.ru" OR destinationntdomain CONTAINS "myaccounts-auth.ru" OR destinationntdomain CONTAINS "security-my-account.ru" OR destinationntdomain CONTAINS "source-place-preference.ru" OR destinationntdomain CONTAINS "safe-place-smartlink.ru" OR destinationntdomain CONTAINS "safe-place-experience.ru" OR destinationntdomain CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "myproject-login.shop" OR destinationhostname CONTAINS "mysite-log.shop" OR destinationhostname CONTAINS "supp-help.me" OR destinationhostname CONTAINS "account-noreply3.xyz" OR destinationhostname CONTAINS "goolge.ltd" OR destinationhostname CONTAINS "goolge.help" OR destinationhostname CONTAINS "account-noreply8.info" OR destinationhostname CONTAINS "account-server.xyz" OR destinationhostname CONTAINS "kcynvd-mail.com" OR destinationhostname CONTAINS "mail-goolge.com" OR destinationhostname CONTAINS "kcynve-mail.com" OR destinationhostname CONTAINS "dtiwa.app.link" OR destinationhostname CONTAINS "share-team.app.link" OR destinationhostname CONTAINS "mipim.app.link" OR destinationhostname CONTAINS "processs.app.link" OR destinationhostname CONTAINS "aws-amazon.app.ink" OR destinationhostname CONTAINS "clik.sbs" OR destinationhostname CONTAINS "loading.sbs" OR destinationhostname CONTAINS "userprofile.live" OR destinationhostname CONTAINS "requestservice.live" OR destinationhostname CONTAINS "unt-log.com" OR destinationhostname CONTAINS "webtech-portal.com" OR destinationhostname CONTAINS "id-apl.info" OR destinationhostname CONTAINS "rnanage-icloud.com" OR destinationhostname CONTAINS "apl.onl" OR destinationhostname CONTAINS "go-gl.io" OR destinationhostname CONTAINS "login-my-oauth-mail.ru" OR destinationhostname CONTAINS "oauth-login-accounts-mail.ru" OR destinationhostname CONTAINS "my-oauth-accounts-mail.ru" OR destinationhostname CONTAINS "login-cloud-myaccount-mail.ru" OR destinationhostname CONTAINS "myaccounts-auth.ru" OR destinationhostname CONTAINS "security-my-account.ru" OR destinationhostname CONTAINS "source-place-preference.ru" OR destinationhostname CONTAINS "safe-place-smartlink.ru" OR destinationhostname CONTAINS "safe-place-experience.ru" OR destinationhostname CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "myproject-login.shop" OR sourcentdomain CONTAINS "mysite-log.shop" OR sourcentdomain CONTAINS "supp-help.me" OR sourcentdomain CONTAINS "account-noreply3.xyz" OR sourcentdomain CONTAINS "goolge.ltd" OR sourcentdomain CONTAINS "goolge.help" OR sourcentdomain CONTAINS "account-noreply8.info" OR sourcentdomain CONTAINS "account-server.xyz" OR sourcentdomain CONTAINS "kcynvd-mail.com" OR sourcentdomain CONTAINS "mail-goolge.com" OR sourcentdomain CONTAINS "kcynve-mail.com" OR sourcentdomain CONTAINS "dtiwa.app.link" OR sourcentdomain CONTAINS "share-team.app.link" OR sourcentdomain CONTAINS "mipim.app.link" OR sourcentdomain CONTAINS "processs.app.link" OR sourcentdomain CONTAINS "aws-amazon.app.ink" OR sourcentdomain CONTAINS "clik.sbs" OR sourcentdomain CONTAINS "loading.sbs" OR sourcentdomain CONTAINS "userprofile.live" OR sourcentdomain CONTAINS "requestservice.live" OR sourcentdomain CONTAINS "unt-log.com" OR sourcentdomain CONTAINS "webtech-portal.com" OR sourcentdomain CONTAINS "id-apl.info" OR sourcentdomain CONTAINS "rnanage-icloud.com" OR sourcentdomain CONTAINS "apl.onl" OR sourcentdomain CONTAINS "go-gl.io" OR sourcentdomain CONTAINS "login-my-oauth-mail.ru" OR sourcentdomain CONTAINS "oauth-login-accounts-mail.ru" OR sourcentdomain CONTAINS "my-oauth-accounts-mail.ru" OR sourcentdomain CONTAINS "login-cloud-myaccount-mail.ru" OR sourcentdomain CONTAINS "myaccounts-auth.ru" OR sourcentdomain CONTAINS "security-my-account.ru" OR sourcentdomain CONTAINS "source-place-preference.ru" OR sourcentdomain CONTAINS "safe-place-smartlink.ru" OR sourcentdomain CONTAINS "safe-place-experience.ru" OR sourcentdomain CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "myproject-login.shop" OR sourcehostname CONTAINS "mysite-log.shop" OR sourcehostname CONTAINS "supp-help.me" OR sourcehostname CONTAINS "account-noreply3.xyz" OR sourcehostname CONTAINS "goolge.ltd" OR sourcehostname CONTAINS "goolge.help" OR sourcehostname CONTAINS "account-noreply8.info" OR sourcehostname CONTAINS "account-server.xyz" OR sourcehostname CONTAINS "kcynvd-mail.com" OR sourcehostname CONTAINS "mail-goolge.com" OR sourcehostname CONTAINS "kcynve-mail.com" OR sourcehostname CONTAINS "dtiwa.app.link" OR sourcehostname CONTAINS "share-team.app.link" OR sourcehostname CONTAINS "mipim.app.link" OR sourcehostname CONTAINS "processs.app.link" OR sourcehostname CONTAINS "aws-amazon.app.ink" OR sourcehostname CONTAINS "clik.sbs" OR sourcehostname CONTAINS "loading.sbs" OR sourcehostname CONTAINS "userprofile.live" OR sourcehostname CONTAINS "requestservice.live" OR sourcehostname CONTAINS "unt-log.com" OR sourcehostname CONTAINS "webtech-portal.com" OR sourcehostname CONTAINS "id-apl.info" OR sourcehostname CONTAINS "rnanage-icloud.com" OR sourcehostname CONTAINS "apl.onl" OR sourcehostname CONTAINS "go-gl.io" OR sourcehostname CONTAINS "login-my-oauth-mail.ru" OR sourcehostname CONTAINS "oauth-login-accounts-mail.ru" OR sourcehostname CONTAINS "my-oauth-accounts-mail.ru" OR sourcehostname CONTAINS "login-cloud-myaccount-mail.ru" OR sourcehostname CONTAINS "myaccounts-auth.ru" OR sourcehostname CONTAINS "security-my-account.ru" OR sourcehostname CONTAINS "source-place-preference.ru" OR sourcehostname CONTAINS "safe-place-smartlink.ru" OR sourcehostname CONTAINS "safe-place-experience.ru" OR sourcehostname CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "myproject-login.shop" OR destinationntdomain CONTAINS "mysite-log.shop" OR destinationntdomain CONTAINS "supp-help.me" OR destinationntdomain CONTAINS "account-noreply3.xyz" OR destinationntdomain CONTAINS "goolge.ltd" OR destinationntdomain CONTAINS "goolge.help" OR destinationntdomain CONTAINS "account-noreply8.info" OR destinationntdomain CONTAINS "account-server.xyz" OR destinationntdomain CONTAINS "kcynvd-mail.com" OR destinationntdomain CONTAINS "mail-goolge.com" OR destinationntdomain CONTAINS "kcynve-mail.com" OR destinationntdomain CONTAINS "dtiwa.app.link" OR destinationntdomain CONTAINS "share-team.app.link" OR destinationntdomain CONTAINS "mipim.app.link" OR destinationntdomain CONTAINS "processs.app.link" OR destinationntdomain CONTAINS "aws-amazon.app.ink" OR destinationntdomain CONTAINS "clik.sbs" OR destinationntdomain CONTAINS "loading.sbs" OR destinationntdomain CONTAINS "userprofile.live" OR destinationntdomain CONTAINS "requestservice.live" OR destinationntdomain CONTAINS "unt-log.com" OR destinationntdomain CONTAINS "webtech-portal.com" OR destinationntdomain CONTAINS "id-apl.info" OR destinationntdomain CONTAINS "rnanage-icloud.com" OR destinationntdomain CONTAINS "apl.onl" OR destinationntdomain CONTAINS "go-gl.io" OR destinationntdomain CONTAINS "login-my-oauth-mail.ru" OR destinationntdomain CONTAINS "oauth-login-accounts-mail.ru" OR destinationntdomain CONTAINS "my-oauth-accounts-mail.ru" OR destinationntdomain CONTAINS "login-cloud-myaccount-mail.ru" OR destinationntdomain CONTAINS "myaccounts-auth.ru" OR destinationntdomain CONTAINS "security-my-account.ru" OR destinationntdomain CONTAINS "source-place-preference.ru" OR destinationntdomain CONTAINS "safe-place-smartlink.ru" OR destinationntdomain CONTAINS "safe-place-experience.ru" OR destinationntdomain CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "myproject-login.shop" OR destinationhostname CONTAINS "mysite-log.shop" OR destinationhostname CONTAINS "supp-help.me" OR destinationhostname CONTAINS "account-noreply3.xyz" OR destinationhostname CONTAINS "goolge.ltd" OR destinationhostname CONTAINS "goolge.help" OR destinationhostname CONTAINS "account-noreply8.info" OR destinationhostname CONTAINS "account-server.xyz" OR destinationhostname CONTAINS "kcynvd-mail.com" OR destinationhostname CONTAINS "mail-goolge.com" OR destinationhostname CONTAINS "kcynve-mail.com" OR destinationhostname CONTAINS "dtiwa.app.link" OR destinationhostname CONTAINS "share-team.app.link" OR destinationhostname CONTAINS "mipim.app.link" OR destinationhostname CONTAINS "processs.app.link" OR destinationhostname CONTAINS "aws-amazon.app.ink" OR destinationhostname CONTAINS "clik.sbs" OR destinationhostname CONTAINS "loading.sbs" OR destinationhostname CONTAINS "userprofile.live" OR destinationhostname CONTAINS "requestservice.live" OR destinationhostname CONTAINS "unt-log.com" OR destinationhostname CONTAINS "webtech-portal.com" OR destinationhostname CONTAINS "id-apl.info" OR destinationhostname CONTAINS "rnanage-icloud.com" OR destinationhostname CONTAINS "apl.onl" OR destinationhostname CONTAINS "go-gl.io" OR destinationhostname CONTAINS "login-my-oauth-mail.ru" OR destinationhostname CONTAINS "oauth-login-accounts-mail.ru" OR destinationhostname CONTAINS "my-oauth-accounts-mail.ru" OR destinationhostname CONTAINS "login-cloud-myaccount-mail.ru" OR destinationhostname CONTAINS "myaccounts-auth.ru" OR destinationhostname CONTAINS "security-my-account.ru" OR destinationhostname CONTAINS "source-place-preference.ru" OR destinationhostname CONTAINS "safe-place-smartlink.ru" OR destinationhostname CONTAINS "safe-place-experience.ru" OR destinationhostname CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "myproject-login.shop" OR sourcentdomain CONTAINS "mysite-log.shop" OR sourcentdomain CONTAINS "supp-help.me" OR sourcentdomain CONTAINS "account-noreply3.xyz" OR sourcentdomain CONTAINS "goolge.ltd" OR sourcentdomain CONTAINS "goolge.help" OR sourcentdomain CONTAINS "account-noreply8.info" OR sourcentdomain CONTAINS "account-server.xyz" OR sourcentdomain CONTAINS "kcynvd-mail.com" OR sourcentdomain CONTAINS "mail-goolge.com" OR sourcentdomain CONTAINS "kcynve-mail.com" OR sourcentdomain CONTAINS "dtiwa.app.link" OR sourcentdomain CONTAINS "share-team.app.link" OR sourcentdomain CONTAINS "mipim.app.link" OR sourcentdomain CONTAINS "processs.app.link" OR sourcentdomain CONTAINS "aws-amazon.app.ink" OR sourcentdomain CONTAINS "clik.sbs" OR sourcentdomain CONTAINS "loading.sbs" OR sourcentdomain CONTAINS "userprofile.live" OR sourcentdomain CONTAINS "requestservice.live" OR sourcentdomain CONTAINS "unt-log.com" OR sourcentdomain CONTAINS "webtech-portal.com" OR sourcentdomain CONTAINS "id-apl.info" OR sourcentdomain CONTAINS "rnanage-icloud.com" OR sourcentdomain CONTAINS "apl.onl" OR sourcentdomain CONTAINS "go-gl.io" OR sourcentdomain CONTAINS "login-my-oauth-mail.ru" OR sourcentdomain CONTAINS "oauth-login-accounts-mail.ru" OR sourcentdomain CONTAINS "my-oauth-accounts-mail.ru" OR sourcentdomain CONTAINS "login-cloud-myaccount-mail.ru" OR sourcentdomain CONTAINS "myaccounts-auth.ru" OR sourcentdomain CONTAINS "security-my-account.ru" OR sourcentdomain CONTAINS "source-place-preference.ru" OR sourcentdomain CONTAINS "safe-place-smartlink.ru" OR sourcentdomain CONTAINS "safe-place-experience.ru" OR sourcentdomain CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "myproject-login.shop" OR sourcehostname CONTAINS "mysite-log.shop" OR sourcehostname CONTAINS "supp-help.me" OR sourcehostname CONTAINS "account-noreply3.xyz" OR sourcehostname CONTAINS "goolge.ltd" OR sourcehostname CONTAINS "goolge.help" OR sourcehostname CONTAINS "account-noreply8.info" OR sourcehostname CONTAINS "account-server.xyz" OR sourcehostname CONTAINS "kcynvd-mail.com" OR sourcehostname CONTAINS "mail-goolge.com" OR sourcehostname CONTAINS "kcynve-mail.com" OR sourcehostname CONTAINS "dtiwa.app.link" OR sourcehostname CONTAINS "share-team.app.link" OR sourcehostname CONTAINS "mipim.app.link" OR sourcehostname CONTAINS "processs.app.link" OR sourcehostname CONTAINS "aws-amazon.app.ink" OR sourcehostname CONTAINS "clik.sbs" OR sourcehostname CONTAINS "loading.sbs" OR sourcehostname CONTAINS "userprofile.live" OR sourcehostname CONTAINS "requestservice.live" OR sourcehostname CONTAINS "unt-log.com" OR sourcehostname CONTAINS "webtech-portal.com" OR sourcehostname CONTAINS "id-apl.info" OR sourcehostname CONTAINS "rnanage-icloud.com" OR sourcehostname CONTAINS "apl.onl" OR sourcehostname CONTAINS "go-gl.io" OR sourcehostname CONTAINS "login-my-oauth-mail.ru" OR sourcehostname CONTAINS "oauth-login-accounts-mail.ru" OR sourcehostname CONTAINS "my-oauth-accounts-mail.ru" OR sourcehostname CONTAINS "login-cloud-myaccount-mail.ru" OR sourcehostname CONTAINS "myaccounts-auth.ru" OR sourcehostname CONTAINS "security-my-account.ru" OR sourcehostname CONTAINS "source-place-preference.ru" OR sourcehostname CONTAINS "safe-place-smartlink.ru" OR sourcehostname CONTAINS "safe-place-experience.ru" OR sourcehostname CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "myproject-login.shop" OR destinationntdomain CONTAINS "mysite-log.shop" OR destinationntdomain CONTAINS "supp-help.me" OR destinationntdomain CONTAINS "account-noreply3.xyz" OR destinationntdomain CONTAINS "goolge.ltd" OR destinationntdomain CONTAINS "goolge.help" OR destinationntdomain CONTAINS "account-noreply8.info" OR destinationntdomain CONTAINS "account-server.xyz" OR destinationntdomain CONTAINS "kcynvd-mail.com" OR destinationntdomain CONTAINS "mail-goolge.com" OR destinationntdomain CONTAINS "kcynve-mail.com" OR destinationntdomain CONTAINS "dtiwa.app.link" OR destinationntdomain CONTAINS "share-team.app.link" OR destinationntdomain CONTAINS "mipim.app.link" OR destinationntdomain CONTAINS "processs.app.link" OR destinationntdomain CONTAINS "aws-amazon.app.ink" OR destinationntdomain CONTAINS "clik.sbs" OR destinationntdomain CONTAINS "loading.sbs" OR destinationntdomain CONTAINS "userprofile.live" OR destinationntdomain CONTAINS "requestservice.live" OR destinationntdomain CONTAINS "unt-log.com" OR destinationntdomain CONTAINS "webtech-portal.com" OR destinationntdomain CONTAINS "id-apl.info" OR destinationntdomain CONTAINS "rnanage-icloud.com" OR destinationntdomain CONTAINS "apl.onl" OR destinationntdomain CONTAINS "go-gl.io" OR destinationntdomain CONTAINS "login-my-oauth-mail.ru" OR destinationntdomain CONTAINS "oauth-login-accounts-mail.ru" OR destinationntdomain CONTAINS "my-oauth-accounts-mail.ru" OR destinationntdomain CONTAINS "login-cloud-myaccount-mail.ru" OR destinationntdomain CONTAINS "myaccounts-auth.ru" OR destinationntdomain CONTAINS "security-my-account.ru" OR destinationntdomain CONTAINS "source-place-preference.ru" OR destinationntdomain CONTAINS "safe-place-smartlink.ru" OR destinationntdomain CONTAINS "safe-place-experience.ru" OR destinationntdomain CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "myproject-login.shop" OR destinationhostname CONTAINS "mysite-log.shop" OR destinationhostname CONTAINS "supp-help.me" OR destinationhostname CONTAINS "account-noreply3.xyz" OR destinationhostname CONTAINS "goolge.ltd" OR destinationhostname CONTAINS "goolge.help" OR destinationhostname CONTAINS "account-noreply8.info" OR destinationhostname CONTAINS "account-server.xyz" OR destinationhostname CONTAINS "kcynvd-mail.com" OR destinationhostname CONTAINS "mail-goolge.com" OR destinationhostname CONTAINS "kcynve-mail.com" OR destinationhostname CONTAINS "dtiwa.app.link" OR destinationhostname CONTAINS "share-team.app.link" OR destinationhostname CONTAINS "mipim.app.link" OR destinationhostname CONTAINS "processs.app.link" OR destinationhostname CONTAINS "aws-amazon.app.ink" OR destinationhostname CONTAINS "clik.sbs" OR destinationhostname CONTAINS "loading.sbs" OR destinationhostname CONTAINS "userprofile.live" OR destinationhostname CONTAINS "requestservice.live" OR destinationhostname CONTAINS "unt-log.com" OR destinationhostname CONTAINS "webtech-portal.com" OR destinationhostname CONTAINS "id-apl.info" OR destinationhostname CONTAINS "rnanage-icloud.com" OR destinationhostname CONTAINS "apl.onl" OR destinationhostname CONTAINS "go-gl.io" OR destinationhostname CONTAINS "login-my-oauth-mail.ru" OR destinationhostname CONTAINS "oauth-login-accounts-mail.ru" OR destinationhostname CONTAINS "my-oauth-accounts-mail.ru" OR destinationhostname CONTAINS "login-cloud-myaccount-mail.ru" OR destinationhostname CONTAINS "myaccounts-auth.ru" OR destinationhostname CONTAINS "security-my-account.ru" OR destinationhostname CONTAINS "source-place-preference.ru" OR destinationhostname CONTAINS "safe-place-smartlink.ru" OR destinationhostname CONTAINS "safe-place-experience.ru" OR destinationhostname CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "myproject-login.shop" OR sourcentdomain CONTAINS "mysite-log.shop" OR sourcentdomain CONTAINS "supp-help.me" OR sourcentdomain CONTAINS "account-noreply3.xyz" OR sourcentdomain CONTAINS "goolge.ltd" OR sourcentdomain CONTAINS "goolge.help" OR sourcentdomain CONTAINS "account-noreply8.info" OR sourcentdomain CONTAINS "account-server.xyz" OR sourcentdomain CONTAINS "kcynvd-mail.com" OR sourcentdomain CONTAINS "mail-goolge.com" OR sourcentdomain CONTAINS "kcynve-mail.com" OR sourcentdomain CONTAINS "dtiwa.app.link" OR sourcentdomain CONTAINS "share-team.app.link" OR sourcentdomain CONTAINS "mipim.app.link" OR sourcentdomain CONTAINS "processs.app.link" OR sourcentdomain CONTAINS "aws-amazon.app.ink" OR sourcentdomain CONTAINS "clik.sbs" OR sourcentdomain CONTAINS "loading.sbs" OR sourcentdomain CONTAINS "userprofile.live" OR sourcentdomain CONTAINS "requestservice.live" OR sourcentdomain CONTAINS "unt-log.com" OR sourcentdomain CONTAINS "webtech-portal.com" OR sourcentdomain CONTAINS "id-apl.info" OR sourcentdomain CONTAINS "rnanage-icloud.com" OR sourcentdomain CONTAINS "apl.onl" OR sourcentdomain CONTAINS "go-gl.io" OR sourcentdomain CONTAINS "login-my-oauth-mail.ru" OR sourcentdomain CONTAINS "oauth-login-accounts-mail.ru" OR sourcentdomain CONTAINS "my-oauth-accounts-mail.ru" OR sourcentdomain CONTAINS "login-cloud-myaccount-mail.ru" OR sourcentdomain CONTAINS "myaccounts-auth.ru" OR sourcentdomain CONTAINS "security-my-account.ru" OR sourcentdomain CONTAINS "source-place-preference.ru" OR sourcentdomain CONTAINS "safe-place-smartlink.ru" OR sourcentdomain CONTAINS "safe-place-experience.ru" OR sourcentdomain CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "myproject-login.shop" OR sourcehostname CONTAINS "mysite-log.shop" OR sourcehostname CONTAINS "supp-help.me" OR sourcehostname CONTAINS "account-noreply3.xyz" OR sourcehostname CONTAINS "goolge.ltd" OR sourcehostname CONTAINS "goolge.help" OR sourcehostname CONTAINS "account-noreply8.info" OR sourcehostname CONTAINS "account-server.xyz" OR sourcehostname CONTAINS "kcynvd-mail.com" OR sourcehostname CONTAINS "mail-goolge.com" OR sourcehostname CONTAINS "kcynve-mail.com" OR sourcehostname CONTAINS "dtiwa.app.link" OR sourcehostname CONTAINS "share-team.app.link" OR sourcehostname CONTAINS "mipim.app.link" OR sourcehostname CONTAINS "processs.app.link" OR sourcehostname CONTAINS "aws-amazon.app.ink" OR sourcehostname CONTAINS "clik.sbs" OR sourcehostname CONTAINS "loading.sbs" OR sourcehostname CONTAINS "userprofile.live" OR sourcehostname CONTAINS "requestservice.live" OR sourcehostname CONTAINS "unt-log.com" OR sourcehostname CONTAINS "webtech-portal.com" OR sourcehostname CONTAINS "id-apl.info" OR sourcehostname CONTAINS "rnanage-icloud.com" OR sourcehostname CONTAINS "apl.onl" OR sourcehostname CONTAINS "go-gl.io" OR sourcehostname CONTAINS "login-my-oauth-mail.ru" OR sourcehostname CONTAINS "oauth-login-accounts-mail.ru" OR sourcehostname CONTAINS "my-oauth-accounts-mail.ru" OR sourcehostname CONTAINS "login-cloud-myaccount-mail.ru" OR sourcehostname CONTAINS "myaccounts-auth.ru" OR sourcehostname CONTAINS "security-my-account.ru" OR sourcehostname CONTAINS "source-place-preference.ru" OR sourcehostname CONTAINS "safe-place-smartlink.ru" OR sourcehostname CONTAINS "safe-place-experience.ru" OR sourcehostname CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "myproject-login.shop" OR destinationntdomain CONTAINS "mysite-log.shop" OR destinationntdomain CONTAINS "supp-help.me" OR destinationntdomain CONTAINS "account-noreply3.xyz" OR destinationntdomain CONTAINS "goolge.ltd" OR destinationntdomain CONTAINS "goolge.help" OR destinationntdomain CONTAINS "account-noreply8.info" OR destinationntdomain CONTAINS "account-server.xyz" OR destinationntdomain CONTAINS "kcynvd-mail.com" OR destinationntdomain CONTAINS "mail-goolge.com" OR destinationntdomain CONTAINS "kcynve-mail.com" OR destinationntdomain CONTAINS "dtiwa.app.link" OR destinationntdomain CONTAINS "share-team.app.link" OR destinationntdomain CONTAINS "mipim.app.link" OR destinationntdomain CONTAINS "processs.app.link" OR destinationntdomain CONTAINS "aws-amazon.app.ink" OR destinationntdomain CONTAINS "clik.sbs" OR destinationntdomain CONTAINS "loading.sbs" OR destinationntdomain CONTAINS "userprofile.live" OR destinationntdomain CONTAINS "requestservice.live" OR destinationntdomain CONTAINS "unt-log.com" OR destinationntdomain CONTAINS "webtech-portal.com" OR destinationntdomain CONTAINS "id-apl.info" OR destinationntdomain CONTAINS "rnanage-icloud.com" OR destinationntdomain CONTAINS "apl.onl" OR destinationntdomain CONTAINS "go-gl.io" OR destinationntdomain CONTAINS "login-my-oauth-mail.ru" OR destinationntdomain CONTAINS "oauth-login-accounts-mail.ru" OR destinationntdomain CONTAINS "my-oauth-accounts-mail.ru" OR destinationntdomain CONTAINS "login-cloud-myaccount-mail.ru" OR destinationntdomain CONTAINS "myaccounts-auth.ru" OR destinationntdomain CONTAINS "security-my-account.ru" OR destinationntdomain CONTAINS "source-place-preference.ru" OR destinationntdomain CONTAINS "safe-place-smartlink.ru" OR destinationntdomain CONTAINS "safe-place-experience.ru" OR destinationntdomain CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "myproject-login.shop" OR destinationhostname CONTAINS "mysite-log.shop" OR destinationhostname CONTAINS "supp-help.me" OR destinationhostname CONTAINS "account-noreply3.xyz" OR destinationhostname CONTAINS "goolge.ltd" OR destinationhostname CONTAINS "goolge.help" OR destinationhostname CONTAINS "account-noreply8.info" OR destinationhostname CONTAINS "account-server.xyz" OR destinationhostname CONTAINS "kcynvd-mail.com" OR destinationhostname CONTAINS "mail-goolge.com" OR destinationhostname CONTAINS "kcynve-mail.com" OR destinationhostname CONTAINS "dtiwa.app.link" OR destinationhostname CONTAINS "share-team.app.link" OR destinationhostname CONTAINS "mipim.app.link" OR destinationhostname CONTAINS "processs.app.link" OR destinationhostname CONTAINS "aws-amazon.app.ink" OR destinationhostname CONTAINS "clik.sbs" OR destinationhostname CONTAINS "loading.sbs" OR destinationhostname CONTAINS "userprofile.live" OR destinationhostname CONTAINS "requestservice.live" OR destinationhostname CONTAINS "unt-log.com" OR destinationhostname CONTAINS "webtech-portal.com" OR destinationhostname CONTAINS "id-apl.info" OR destinationhostname CONTAINS "rnanage-icloud.com" OR destinationhostname CONTAINS "apl.onl" OR destinationhostname CONTAINS "go-gl.io" OR destinationhostname CONTAINS "login-my-oauth-mail.ru" OR destinationhostname CONTAINS "oauth-login-accounts-mail.ru" OR destinationhostname CONTAINS "my-oauth-accounts-mail.ru" OR destinationhostname CONTAINS "login-cloud-myaccount-mail.ru" OR destinationhostname CONTAINS "myaccounts-auth.ru" OR destinationhostname CONTAINS "security-my-account.ru" OR destinationhostname CONTAINS "source-place-preference.ru" OR destinationhostname CONTAINS "safe-place-smartlink.ru" OR destinationhostname CONTAINS "safe-place-experience.ru" OR destinationhostname CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "myproject-login.shop" OR sourcentdomain CONTAINS "mysite-log.shop" OR sourcentdomain CONTAINS "supp-help.me" OR sourcentdomain CONTAINS "account-noreply3.xyz" OR sourcentdomain CONTAINS "goolge.ltd" OR sourcentdomain CONTAINS "goolge.help" OR sourcentdomain CONTAINS "account-noreply8.info" OR sourcentdomain CONTAINS "account-server.xyz" OR sourcentdomain CONTAINS "kcynvd-mail.com" OR sourcentdomain CONTAINS "mail-goolge.com" OR sourcentdomain CONTAINS "kcynve-mail.com" OR sourcentdomain CONTAINS "dtiwa.app.link" OR sourcentdomain CONTAINS "share-team.app.link" OR sourcentdomain CONTAINS "mipim.app.link" OR sourcentdomain CONTAINS "processs.app.link" OR sourcentdomain CONTAINS "aws-amazon.app.ink" OR sourcentdomain CONTAINS "clik.sbs" OR sourcentdomain CONTAINS "loading.sbs" OR sourcentdomain CONTAINS "userprofile.live" OR sourcentdomain CONTAINS "requestservice.live" OR sourcentdomain CONTAINS "unt-log.com" OR sourcentdomain CONTAINS "webtech-portal.com" OR sourcentdomain CONTAINS "id-apl.info" OR sourcentdomain CONTAINS "rnanage-icloud.com" OR sourcentdomain CONTAINS "apl.onl" OR sourcentdomain CONTAINS "go-gl.io" OR sourcentdomain CONTAINS "login-my-oauth-mail.ru" OR sourcentdomain CONTAINS "oauth-login-accounts-mail.ru" OR sourcentdomain CONTAINS "my-oauth-accounts-mail.ru" OR sourcentdomain CONTAINS "login-cloud-myaccount-mail.ru" OR sourcentdomain CONTAINS "myaccounts-auth.ru" OR sourcentdomain CONTAINS "security-my-account.ru" OR sourcentdomain CONTAINS "source-place-preference.ru" OR sourcentdomain CONTAINS "safe-place-smartlink.ru" OR sourcentdomain CONTAINS "safe-place-experience.ru" OR sourcentdomain CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "myproject-login.shop" OR sourcehostname CONTAINS "mysite-log.shop" OR sourcehostname CONTAINS "supp-help.me" OR sourcehostname CONTAINS "account-noreply3.xyz" OR sourcehostname CONTAINS "goolge.ltd" OR sourcehostname CONTAINS "goolge.help" OR sourcehostname CONTAINS "account-noreply8.info" OR sourcehostname CONTAINS "account-server.xyz" OR sourcehostname CONTAINS "kcynvd-mail.com" OR sourcehostname CONTAINS "mail-goolge.com" OR sourcehostname CONTAINS "kcynve-mail.com" OR sourcehostname CONTAINS "dtiwa.app.link" OR sourcehostname CONTAINS "share-team.app.link" OR sourcehostname CONTAINS "mipim.app.link" OR sourcehostname CONTAINS "processs.app.link" OR sourcehostname CONTAINS "aws-amazon.app.ink" OR sourcehostname CONTAINS "clik.sbs" OR sourcehostname CONTAINS "loading.sbs" OR sourcehostname CONTAINS "userprofile.live" OR sourcehostname CONTAINS "requestservice.live" OR sourcehostname CONTAINS "unt-log.com" OR sourcehostname CONTAINS "webtech-portal.com" OR sourcehostname CONTAINS "id-apl.info" OR sourcehostname CONTAINS "rnanage-icloud.com" OR sourcehostname CONTAINS "apl.onl" OR sourcehostname CONTAINS "go-gl.io" OR sourcehostname CONTAINS "login-my-oauth-mail.ru" OR sourcehostname CONTAINS "oauth-login-accounts-mail.ru" OR sourcehostname CONTAINS "my-oauth-accounts-mail.ru" OR sourcehostname CONTAINS "login-cloud-myaccount-mail.ru" OR sourcehostname CONTAINS "myaccounts-auth.ru" OR sourcehostname CONTAINS "security-my-account.ru" OR sourcehostname CONTAINS "source-place-preference.ru" OR sourcehostname CONTAINS "safe-place-smartlink.ru" OR sourcehostname CONTAINS "safe-place-experience.ru" OR sourcehostname CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "myproject-login.shop" OR destinationntdomain CONTAINS "mysite-log.shop" OR destinationntdomain CONTAINS "supp-help.me" OR destinationntdomain CONTAINS "account-noreply3.xyz" OR destinationntdomain CONTAINS "goolge.ltd" OR destinationntdomain CONTAINS "goolge.help" OR destinationntdomain CONTAINS "account-noreply8.info" OR destinationntdomain CONTAINS "account-server.xyz" OR destinationntdomain CONTAINS "kcynvd-mail.com" OR destinationntdomain CONTAINS "mail-goolge.com" OR destinationntdomain CONTAINS "kcynve-mail.com" OR destinationntdomain CONTAINS "dtiwa.app.link" OR destinationntdomain CONTAINS "share-team.app.link" OR destinationntdomain CONTAINS "mipim.app.link" OR destinationntdomain CONTAINS "processs.app.link" OR destinationntdomain CONTAINS "aws-amazon.app.ink" OR destinationntdomain CONTAINS "clik.sbs" OR destinationntdomain CONTAINS "loading.sbs" OR destinationntdomain CONTAINS "userprofile.live" OR destinationntdomain CONTAINS "requestservice.live" OR destinationntdomain CONTAINS "unt-log.com" OR destinationntdomain CONTAINS "webtech-portal.com" OR destinationntdomain CONTAINS "id-apl.info" OR destinationntdomain CONTAINS "rnanage-icloud.com" OR destinationntdomain CONTAINS "apl.onl" OR destinationntdomain CONTAINS "go-gl.io" OR destinationntdomain CONTAINS "login-my-oauth-mail.ru" OR destinationntdomain CONTAINS "oauth-login-accounts-mail.ru" OR destinationntdomain CONTAINS "my-oauth-accounts-mail.ru" OR destinationntdomain CONTAINS "login-cloud-myaccount-mail.ru" OR destinationntdomain CONTAINS "myaccounts-auth.ru" OR destinationntdomain CONTAINS "security-my-account.ru" OR destinationntdomain CONTAINS "source-place-preference.ru" OR destinationntdomain CONTAINS "safe-place-smartlink.ru" OR destinationntdomain CONTAINS "safe-place-experience.ru" OR destinationntdomain CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "myproject-login.shop" OR destinationhostname CONTAINS "mysite-log.shop" OR destinationhostname CONTAINS "supp-help.me" OR destinationhostname CONTAINS "account-noreply3.xyz" OR destinationhostname CONTAINS "goolge.ltd" OR destinationhostname CONTAINS "goolge.help" OR destinationhostname CONTAINS "account-noreply8.info" OR destinationhostname CONTAINS "account-server.xyz" OR destinationhostname CONTAINS "kcynvd-mail.com" OR destinationhostname CONTAINS "mail-goolge.com" OR destinationhostname CONTAINS "kcynve-mail.com" OR destinationhostname CONTAINS "dtiwa.app.link" OR destinationhostname CONTAINS "share-team.app.link" OR destinationhostname CONTAINS "mipim.app.link" OR destinationhostname CONTAINS "processs.app.link" OR destinationhostname CONTAINS "aws-amazon.app.ink" OR destinationhostname CONTAINS "clik.sbs" OR destinationhostname CONTAINS "loading.sbs" OR destinationhostname CONTAINS "userprofile.live" OR destinationhostname CONTAINS "requestservice.live" OR destinationhostname CONTAINS "unt-log.com" OR destinationhostname CONTAINS "webtech-portal.com" OR destinationhostname CONTAINS "id-apl.info" OR destinationhostname CONTAINS "rnanage-icloud.com" OR destinationhostname CONTAINS "apl.onl" OR destinationhostname CONTAINS "go-gl.io" OR destinationhostname CONTAINS "login-my-oauth-mail.ru" OR destinationhostname CONTAINS "oauth-login-accounts-mail.ru" OR destinationhostname CONTAINS "my-oauth-accounts-mail.ru" OR destinationhostname CONTAINS "login-cloud-myaccount-mail.ru" OR destinationhostname CONTAINS "myaccounts-auth.ru" OR destinationhostname CONTAINS "security-my-account.ru" OR destinationhostname CONTAINS "source-place-preference.ru" OR destinationhostname CONTAINS "safe-place-smartlink.ru" OR destinationhostname CONTAINS "safe-place-experience.ru" OR destinationhostname CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "myproject-login.shop" OR sourcentdomain CONTAINS "mysite-log.shop" OR sourcentdomain CONTAINS "supp-help.me" OR sourcentdomain CONTAINS "account-noreply3.xyz" OR sourcentdomain CONTAINS "goolge.ltd" OR sourcentdomain CONTAINS "goolge.help" OR sourcentdomain CONTAINS "account-noreply8.info" OR sourcentdomain CONTAINS "account-server.xyz" OR sourcentdomain CONTAINS "kcynvd-mail.com" OR sourcentdomain CONTAINS "mail-goolge.com" OR sourcentdomain CONTAINS "kcynve-mail.com" OR sourcentdomain CONTAINS "dtiwa.app.link" OR sourcentdomain CONTAINS "share-team.app.link" OR sourcentdomain CONTAINS "mipim.app.link" OR sourcentdomain CONTAINS "processs.app.link" OR sourcentdomain CONTAINS "aws-amazon.app.ink" OR sourcentdomain CONTAINS "clik.sbs" OR sourcentdomain CONTAINS "loading.sbs" OR sourcentdomain CONTAINS "userprofile.live" OR sourcentdomain CONTAINS "requestservice.live" OR sourcentdomain CONTAINS "unt-log.com" OR sourcentdomain CONTAINS "webtech-portal.com" OR sourcentdomain CONTAINS "id-apl.info" OR sourcentdomain CONTAINS "rnanage-icloud.com" OR sourcentdomain CONTAINS "apl.onl" OR sourcentdomain CONTAINS "go-gl.io" OR sourcentdomain CONTAINS "login-my-oauth-mail.ru" OR sourcentdomain CONTAINS "oauth-login-accounts-mail.ru" OR sourcentdomain CONTAINS "my-oauth-accounts-mail.ru" OR sourcentdomain CONTAINS "login-cloud-myaccount-mail.ru" OR sourcentdomain CONTAINS "myaccounts-auth.ru" OR sourcentdomain CONTAINS "security-my-account.ru" OR sourcentdomain CONTAINS "source-place-preference.ru" OR sourcentdomain CONTAINS "safe-place-smartlink.ru" OR sourcentdomain CONTAINS "safe-place-experience.ru" OR sourcentdomain CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "myproject-login.shop" OR sourcehostname CONTAINS "mysite-log.shop" OR sourcehostname CONTAINS "supp-help.me" OR sourcehostname CONTAINS "account-noreply3.xyz" OR sourcehostname CONTAINS "goolge.ltd" OR sourcehostname CONTAINS "goolge.help" OR sourcehostname CONTAINS "account-noreply8.info" OR sourcehostname CONTAINS "account-server.xyz" OR sourcehostname CONTAINS "kcynvd-mail.com" OR sourcehostname CONTAINS "mail-goolge.com" OR sourcehostname CONTAINS "kcynve-mail.com" OR sourcehostname CONTAINS "dtiwa.app.link" OR sourcehostname CONTAINS "share-team.app.link" OR sourcehostname CONTAINS "mipim.app.link" OR sourcehostname CONTAINS "processs.app.link" OR sourcehostname CONTAINS "aws-amazon.app.ink" OR sourcehostname CONTAINS "clik.sbs" OR sourcehostname CONTAINS "loading.sbs" OR sourcehostname CONTAINS "userprofile.live" OR sourcehostname CONTAINS "requestservice.live" OR sourcehostname CONTAINS "unt-log.com" OR sourcehostname CONTAINS "webtech-portal.com" OR sourcehostname CONTAINS "id-apl.info" OR sourcehostname CONTAINS "rnanage-icloud.com" OR sourcehostname CONTAINS "apl.onl" OR sourcehostname CONTAINS "go-gl.io" OR sourcehostname CONTAINS "login-my-oauth-mail.ru" OR sourcehostname CONTAINS "oauth-login-accounts-mail.ru" OR sourcehostname CONTAINS "my-oauth-accounts-mail.ru" OR sourcehostname CONTAINS "login-cloud-myaccount-mail.ru" OR sourcehostname CONTAINS "myaccounts-auth.ru" OR sourcehostname CONTAINS "security-my-account.ru" OR sourcehostname CONTAINS "source-place-preference.ru" OR sourcehostname CONTAINS "safe-place-smartlink.ru" OR sourcehostname CONTAINS "safe-place-experience.ru" OR sourcehostname CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "myproject-login.shop" OR destinationntdomain CONTAINS "mysite-log.shop" OR destinationntdomain CONTAINS "supp-help.me" OR destinationntdomain CONTAINS "account-noreply3.xyz" OR destinationntdomain CONTAINS "goolge.ltd" OR destinationntdomain CONTAINS "goolge.help" OR destinationntdomain CONTAINS "account-noreply8.info" OR destinationntdomain CONTAINS "account-server.xyz" OR destinationntdomain CONTAINS "kcynvd-mail.com" OR destinationntdomain CONTAINS "mail-goolge.com" OR destinationntdomain CONTAINS "kcynve-mail.com" OR destinationntdomain CONTAINS "dtiwa.app.link" OR destinationntdomain CONTAINS "share-team.app.link" OR destinationntdomain CONTAINS "mipim.app.link" OR destinationntdomain CONTAINS "processs.app.link" OR destinationntdomain CONTAINS "aws-amazon.app.ink" OR destinationntdomain CONTAINS "clik.sbs" OR destinationntdomain CONTAINS "loading.sbs" OR destinationntdomain CONTAINS "userprofile.live" OR destinationntdomain CONTAINS "requestservice.live" OR destinationntdomain CONTAINS "unt-log.com" OR destinationntdomain CONTAINS "webtech-portal.com" OR destinationntdomain CONTAINS "id-apl.info" OR destinationntdomain CONTAINS "rnanage-icloud.com" OR destinationntdomain CONTAINS "apl.onl" OR destinationntdomain CONTAINS "go-gl.io" OR destinationntdomain CONTAINS "login-my-oauth-mail.ru" OR destinationntdomain CONTAINS "oauth-login-accounts-mail.ru" OR destinationntdomain CONTAINS "my-oauth-accounts-mail.ru" OR destinationntdomain CONTAINS "login-cloud-myaccount-mail.ru" OR destinationntdomain CONTAINS "myaccounts-auth.ru" OR destinationntdomain CONTAINS "security-my-account.ru" OR destinationntdomain CONTAINS "source-place-preference.ru" OR destinationntdomain CONTAINS "safe-place-smartlink.ru" OR destinationntdomain CONTAINS "safe-place-experience.ru" OR destinationntdomain CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "myproject-login.shop" OR destinationhostname CONTAINS "mysite-log.shop" OR destinationhostname CONTAINS "supp-help.me" OR destinationhostname CONTAINS "account-noreply3.xyz" OR destinationhostname CONTAINS "goolge.ltd" OR destinationhostname CONTAINS "goolge.help" OR destinationhostname CONTAINS "account-noreply8.info" OR destinationhostname CONTAINS "account-server.xyz" OR destinationhostname CONTAINS "kcynvd-mail.com" OR destinationhostname CONTAINS "mail-goolge.com" OR destinationhostname CONTAINS "kcynve-mail.com" OR destinationhostname CONTAINS "dtiwa.app.link" OR destinationhostname CONTAINS "share-team.app.link" OR destinationhostname CONTAINS "mipim.app.link" OR destinationhostname CONTAINS "processs.app.link" OR destinationhostname CONTAINS "aws-amazon.app.ink" OR destinationhostname CONTAINS "clik.sbs" OR destinationhostname CONTAINS "loading.sbs" OR destinationhostname CONTAINS "userprofile.live" OR destinationhostname CONTAINS "requestservice.live" OR destinationhostname CONTAINS "unt-log.com" OR destinationhostname CONTAINS "webtech-portal.com" OR destinationhostname CONTAINS "id-apl.info" OR destinationhostname CONTAINS "rnanage-icloud.com" OR destinationhostname CONTAINS "apl.onl" OR destinationhostname CONTAINS "go-gl.io" OR destinationhostname CONTAINS "login-my-oauth-mail.ru" OR destinationhostname CONTAINS "oauth-login-accounts-mail.ru" OR destinationhostname CONTAINS "my-oauth-accounts-mail.ru" OR destinationhostname CONTAINS "login-cloud-myaccount-mail.ru" OR destinationhostname CONTAINS "myaccounts-auth.ru" OR destinationhostname CONTAINS "security-my-account.ru" OR destinationhostname CONTAINS "source-place-preference.ru" OR destinationhostname CONTAINS "safe-place-smartlink.ru" OR destinationhostname CONTAINS "safe-place-experience.ru" OR destinationhostname CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "myproject-login.shop" OR sourcentdomain CONTAINS "mysite-log.shop" OR sourcentdomain CONTAINS "supp-help.me" OR sourcentdomain CONTAINS "account-noreply3.xyz" OR sourcentdomain CONTAINS "goolge.ltd" OR sourcentdomain CONTAINS "goolge.help" OR sourcentdomain CONTAINS "account-noreply8.info" OR sourcentdomain CONTAINS "account-server.xyz" OR sourcentdomain CONTAINS "kcynvd-mail.com" OR sourcentdomain CONTAINS "mail-goolge.com" OR sourcentdomain CONTAINS "kcynve-mail.com" OR sourcentdomain CONTAINS "dtiwa.app.link" OR sourcentdomain CONTAINS "share-team.app.link" OR sourcentdomain CONTAINS "mipim.app.link" OR sourcentdomain CONTAINS "processs.app.link" OR sourcentdomain CONTAINS "aws-amazon.app.ink" OR sourcentdomain CONTAINS "clik.sbs" OR sourcentdomain CONTAINS "loading.sbs" OR sourcentdomain CONTAINS "userprofile.live" OR sourcentdomain CONTAINS "requestservice.live" OR sourcentdomain CONTAINS "unt-log.com" OR sourcentdomain CONTAINS "webtech-portal.com" OR sourcentdomain CONTAINS "id-apl.info" OR sourcentdomain CONTAINS "rnanage-icloud.com" OR sourcentdomain CONTAINS "apl.onl" OR sourcentdomain CONTAINS "go-gl.io" OR sourcentdomain CONTAINS "login-my-oauth-mail.ru" OR sourcentdomain CONTAINS "oauth-login-accounts-mail.ru" OR sourcentdomain CONTAINS "my-oauth-accounts-mail.ru" OR sourcentdomain CONTAINS "login-cloud-myaccount-mail.ru" OR sourcentdomain CONTAINS "myaccounts-auth.ru" OR sourcentdomain CONTAINS "security-my-account.ru" OR sourcentdomain CONTAINS "source-place-preference.ru" OR sourcentdomain CONTAINS "safe-place-smartlink.ru" OR sourcentdomain CONTAINS "safe-place-experience.ru" OR sourcentdomain CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "myproject-login.shop" OR sourcehostname CONTAINS "mysite-log.shop" OR sourcehostname CONTAINS "supp-help.me" OR sourcehostname CONTAINS "account-noreply3.xyz" OR sourcehostname CONTAINS "goolge.ltd" OR sourcehostname CONTAINS "goolge.help" OR sourcehostname CONTAINS "account-noreply8.info" OR sourcehostname CONTAINS "account-server.xyz" OR sourcehostname CONTAINS "kcynvd-mail.com" OR sourcehostname CONTAINS "mail-goolge.com" OR sourcehostname CONTAINS "kcynve-mail.com" OR sourcehostname CONTAINS "dtiwa.app.link" OR sourcehostname CONTAINS "share-team.app.link" OR sourcehostname CONTAINS "mipim.app.link" OR sourcehostname CONTAINS "processs.app.link" OR sourcehostname CONTAINS "aws-amazon.app.ink" OR sourcehostname CONTAINS "clik.sbs" OR sourcehostname CONTAINS "loading.sbs" OR sourcehostname CONTAINS "userprofile.live" OR sourcehostname CONTAINS "requestservice.live" OR sourcehostname CONTAINS "unt-log.com" OR sourcehostname CONTAINS "webtech-portal.com" OR sourcehostname CONTAINS "id-apl.info" OR sourcehostname CONTAINS "rnanage-icloud.com" OR sourcehostname CONTAINS "apl.onl" OR sourcehostname CONTAINS "go-gl.io" OR sourcehostname CONTAINS "login-my-oauth-mail.ru" OR sourcehostname CONTAINS "oauth-login-accounts-mail.ru" OR sourcehostname CONTAINS "my-oauth-accounts-mail.ru" OR sourcehostname CONTAINS "login-cloud-myaccount-mail.ru" OR sourcehostname CONTAINS "myaccounts-auth.ru" OR sourcehostname CONTAINS "security-my-account.ru" OR sourcehostname CONTAINS "source-place-preference.ru" OR sourcehostname CONTAINS "safe-place-smartlink.ru" OR sourcehostname CONTAINS "safe-place-experience.ru" OR sourcehostname CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "myproject-login.shop" OR destinationntdomain CONTAINS "mysite-log.shop" OR destinationntdomain CONTAINS "supp-help.me" OR destinationntdomain CONTAINS "account-noreply3.xyz" OR destinationntdomain CONTAINS "goolge.ltd" OR destinationntdomain CONTAINS "goolge.help" OR destinationntdomain CONTAINS "account-noreply8.info" OR destinationntdomain CONTAINS "account-server.xyz" OR destinationntdomain CONTAINS "kcynvd-mail.com" OR destinationntdomain CONTAINS "mail-goolge.com" OR destinationntdomain CONTAINS "kcynve-mail.com" OR destinationntdomain CONTAINS "dtiwa.app.link" OR destinationntdomain CONTAINS "share-team.app.link" OR destinationntdomain CONTAINS "mipim.app.link" OR destinationntdomain CONTAINS "processs.app.link" OR destinationntdomain CONTAINS "aws-amazon.app.ink" OR destinationntdomain CONTAINS "clik.sbs" OR destinationntdomain CONTAINS "loading.sbs" OR destinationntdomain CONTAINS "userprofile.live" OR destinationntdomain CONTAINS "requestservice.live" OR destinationntdomain CONTAINS "unt-log.com" OR destinationntdomain CONTAINS "webtech-portal.com" OR destinationntdomain CONTAINS "id-apl.info" OR destinationntdomain CONTAINS "rnanage-icloud.com" OR destinationntdomain CONTAINS "apl.onl" OR destinationntdomain CONTAINS "go-gl.io" OR destinationntdomain CONTAINS "login-my-oauth-mail.ru" OR destinationntdomain CONTAINS "oauth-login-accounts-mail.ru" OR destinationntdomain CONTAINS "my-oauth-accounts-mail.ru" OR destinationntdomain CONTAINS "login-cloud-myaccount-mail.ru" OR destinationntdomain CONTAINS "myaccounts-auth.ru" OR destinationntdomain CONTAINS "security-my-account.ru" OR destinationntdomain CONTAINS "source-place-preference.ru" OR destinationntdomain CONTAINS "safe-place-smartlink.ru" OR destinationntdomain CONTAINS "safe-place-experience.ru" OR destinationntdomain CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "myproject-login.shop" OR destinationhostname CONTAINS "mysite-log.shop" OR destinationhostname CONTAINS "supp-help.me" OR destinationhostname CONTAINS "account-noreply3.xyz" OR destinationhostname CONTAINS "goolge.ltd" OR destinationhostname CONTAINS "goolge.help" OR destinationhostname CONTAINS "account-noreply8.info" OR destinationhostname CONTAINS "account-server.xyz" OR destinationhostname CONTAINS "kcynvd-mail.com" OR destinationhostname CONTAINS "mail-goolge.com" OR destinationhostname CONTAINS "kcynve-mail.com" OR destinationhostname CONTAINS "dtiwa.app.link" OR destinationhostname CONTAINS "share-team.app.link" OR destinationhostname CONTAINS "mipim.app.link" OR destinationhostname CONTAINS "processs.app.link" OR destinationhostname CONTAINS "aws-amazon.app.ink" OR destinationhostname CONTAINS "clik.sbs" OR destinationhostname CONTAINS "loading.sbs" OR destinationhostname CONTAINS "userprofile.live" OR destinationhostname CONTAINS "requestservice.live" OR destinationhostname CONTAINS "unt-log.com" OR destinationhostname CONTAINS "webtech-portal.com" OR destinationhostname CONTAINS "id-apl.info" OR destinationhostname CONTAINS "rnanage-icloud.com" OR destinationhostname CONTAINS "apl.onl" OR destinationhostname CONTAINS "go-gl.io" OR destinationhostname CONTAINS "login-my-oauth-mail.ru" OR destinationhostname CONTAINS "oauth-login-accounts-mail.ru" OR destinationhostname CONTAINS "my-oauth-accounts-mail.ru" OR destinationhostname CONTAINS "login-cloud-myaccount-mail.ru" OR destinationhostname CONTAINS "myaccounts-auth.ru" OR destinationhostname CONTAINS "security-my-account.ru" OR destinationhostname CONTAINS "source-place-preference.ru" OR destinationhostname CONTAINS "safe-place-smartlink.ru" OR destinationhostname CONTAINS "safe-place-experience.ru" OR destinationhostname CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "myproject-login.shop" OR sourcentdomain CONTAINS "mysite-log.shop" OR sourcentdomain CONTAINS "supp-help.me" OR sourcentdomain CONTAINS "account-noreply3.xyz" OR sourcentdomain CONTAINS "goolge.ltd" OR sourcentdomain CONTAINS "goolge.help" OR sourcentdomain CONTAINS "account-noreply8.info" OR sourcentdomain CONTAINS "account-server.xyz" OR sourcentdomain CONTAINS "kcynvd-mail.com" OR sourcentdomain CONTAINS "mail-goolge.com" OR sourcentdomain CONTAINS "kcynve-mail.com" OR sourcentdomain CONTAINS "dtiwa.app.link" OR sourcentdomain CONTAINS "share-team.app.link" OR sourcentdomain CONTAINS "mipim.app.link" OR sourcentdomain CONTAINS "processs.app.link" OR sourcentdomain CONTAINS "aws-amazon.app.ink" OR sourcentdomain CONTAINS "clik.sbs" OR sourcentdomain CONTAINS "loading.sbs" OR sourcentdomain CONTAINS "userprofile.live" OR sourcentdomain CONTAINS "requestservice.live" OR sourcentdomain CONTAINS "unt-log.com" OR sourcentdomain CONTAINS "webtech-portal.com" OR sourcentdomain CONTAINS "id-apl.info" OR sourcentdomain CONTAINS "rnanage-icloud.com" OR sourcentdomain CONTAINS "apl.onl" OR sourcentdomain CONTAINS "go-gl.io" OR sourcentdomain CONTAINS "login-my-oauth-mail.ru" OR sourcentdomain CONTAINS "oauth-login-accounts-mail.ru" OR sourcentdomain CONTAINS "my-oauth-accounts-mail.ru" OR sourcentdomain CONTAINS "login-cloud-myaccount-mail.ru" OR sourcentdomain CONTAINS "myaccounts-auth.ru" OR sourcentdomain CONTAINS "security-my-account.ru" OR sourcentdomain CONTAINS "source-place-preference.ru" OR sourcentdomain CONTAINS "safe-place-smartlink.ru" OR sourcentdomain CONTAINS "safe-place-experience.ru" OR sourcentdomain CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "myproject-login.shop" OR sourcehostname CONTAINS "mysite-log.shop" OR sourcehostname CONTAINS "supp-help.me" OR sourcehostname CONTAINS "account-noreply3.xyz" OR sourcehostname CONTAINS "goolge.ltd" OR sourcehostname CONTAINS "goolge.help" OR sourcehostname CONTAINS "account-noreply8.info" OR sourcehostname CONTAINS "account-server.xyz" OR sourcehostname CONTAINS "kcynvd-mail.com" OR sourcehostname CONTAINS "mail-goolge.com" OR sourcehostname CONTAINS "kcynve-mail.com" OR sourcehostname CONTAINS "dtiwa.app.link" OR sourcehostname CONTAINS "share-team.app.link" OR sourcehostname CONTAINS "mipim.app.link" OR sourcehostname CONTAINS "processs.app.link" OR sourcehostname CONTAINS "aws-amazon.app.ink" OR sourcehostname CONTAINS "clik.sbs" OR sourcehostname CONTAINS "loading.sbs" OR sourcehostname CONTAINS "userprofile.live" OR sourcehostname CONTAINS "requestservice.live" OR sourcehostname CONTAINS "unt-log.com" OR sourcehostname CONTAINS "webtech-portal.com" OR sourcehostname CONTAINS "id-apl.info" OR sourcehostname CONTAINS "rnanage-icloud.com" OR sourcehostname CONTAINS "apl.onl" OR sourcehostname CONTAINS "go-gl.io" OR sourcehostname CONTAINS "login-my-oauth-mail.ru" OR sourcehostname CONTAINS "oauth-login-accounts-mail.ru" OR sourcehostname CONTAINS "my-oauth-accounts-mail.ru" OR sourcehostname CONTAINS "login-cloud-myaccount-mail.ru" OR sourcehostname CONTAINS "myaccounts-auth.ru" OR sourcehostname CONTAINS "security-my-account.ru" OR sourcehostname CONTAINS "source-place-preference.ru" OR sourcehostname CONTAINS "safe-place-smartlink.ru" OR sourcehostname CONTAINS "safe-place-experience.ru" OR sourcehostname CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "myproject-login.shop" OR destinationntdomain CONTAINS "mysite-log.shop" OR destinationntdomain CONTAINS "supp-help.me" OR destinationntdomain CONTAINS "account-noreply3.xyz" OR destinationntdomain CONTAINS "goolge.ltd" OR destinationntdomain CONTAINS "goolge.help" OR destinationntdomain CONTAINS "account-noreply8.info" OR destinationntdomain CONTAINS "account-server.xyz" OR destinationntdomain CONTAINS "kcynvd-mail.com" OR destinationntdomain CONTAINS "mail-goolge.com" OR destinationntdomain CONTAINS "kcynve-mail.com" OR destinationntdomain CONTAINS "dtiwa.app.link" OR destinationntdomain CONTAINS "share-team.app.link" OR destinationntdomain CONTAINS "mipim.app.link" OR destinationntdomain CONTAINS "processs.app.link" OR destinationntdomain CONTAINS "aws-amazon.app.ink" OR destinationntdomain CONTAINS "clik.sbs" OR destinationntdomain CONTAINS "loading.sbs" OR destinationntdomain CONTAINS "userprofile.live" OR destinationntdomain CONTAINS "requestservice.live" OR destinationntdomain CONTAINS "unt-log.com" OR destinationntdomain CONTAINS "webtech-portal.com" OR destinationntdomain CONTAINS "id-apl.info" OR destinationntdomain CONTAINS "rnanage-icloud.com" OR destinationntdomain CONTAINS "apl.onl" OR destinationntdomain CONTAINS "go-gl.io" OR destinationntdomain CONTAINS "login-my-oauth-mail.ru" OR destinationntdomain CONTAINS "oauth-login-accounts-mail.ru" OR destinationntdomain CONTAINS "my-oauth-accounts-mail.ru" OR destinationntdomain CONTAINS "login-cloud-myaccount-mail.ru" OR destinationntdomain CONTAINS "myaccounts-auth.ru" OR destinationntdomain CONTAINS "security-my-account.ru" OR destinationntdomain CONTAINS "source-place-preference.ru" OR destinationntdomain CONTAINS "safe-place-smartlink.ru" OR destinationntdomain CONTAINS "safe-place-experience.ru" OR destinationntdomain CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "myproject-login.shop" OR destinationhostname CONTAINS "mysite-log.shop" OR destinationhostname CONTAINS "supp-help.me" OR destinationhostname CONTAINS "account-noreply3.xyz" OR destinationhostname CONTAINS "goolge.ltd" OR destinationhostname CONTAINS "goolge.help" OR destinationhostname CONTAINS "account-noreply8.info" OR destinationhostname CONTAINS "account-server.xyz" OR destinationhostname CONTAINS "kcynvd-mail.com" OR destinationhostname CONTAINS "mail-goolge.com" OR destinationhostname CONTAINS "kcynve-mail.com" OR destinationhostname CONTAINS "dtiwa.app.link" OR destinationhostname CONTAINS "share-team.app.link" OR destinationhostname CONTAINS "mipim.app.link" OR destinationhostname CONTAINS "processs.app.link" OR destinationhostname CONTAINS "aws-amazon.app.ink" OR destinationhostname CONTAINS "clik.sbs" OR destinationhostname CONTAINS "loading.sbs" OR destinationhostname CONTAINS "userprofile.live" OR destinationhostname CONTAINS "requestservice.live" OR destinationhostname CONTAINS "unt-log.com" OR destinationhostname CONTAINS "webtech-portal.com" OR destinationhostname CONTAINS "id-apl.info" OR destinationhostname CONTAINS "rnanage-icloud.com" OR destinationhostname CONTAINS "apl.onl" OR destinationhostname CONTAINS "go-gl.io" OR destinationhostname CONTAINS "login-my-oauth-mail.ru" OR destinationhostname CONTAINS "oauth-login-accounts-mail.ru" OR destinationhostname CONTAINS "my-oauth-accounts-mail.ru" OR destinationhostname CONTAINS "login-cloud-myaccount-mail.ru" OR destinationhostname CONTAINS "myaccounts-auth.ru" OR destinationhostname CONTAINS "security-my-account.ru" OR destinationhostname CONTAINS "source-place-preference.ru" OR destinationhostname CONTAINS "safe-place-smartlink.ru" OR destinationhostname CONTAINS "safe-place-experience.ru" OR destinationhostname CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "myproject-login.shop" OR sourcentdomain CONTAINS "mysite-log.shop" OR sourcentdomain CONTAINS "supp-help.me" OR sourcentdomain CONTAINS "account-noreply3.xyz" OR sourcentdomain CONTAINS "goolge.ltd" OR sourcentdomain CONTAINS "goolge.help" OR sourcentdomain CONTAINS "account-noreply8.info" OR sourcentdomain CONTAINS "account-server.xyz" OR sourcentdomain CONTAINS "kcynvd-mail.com" OR sourcentdomain CONTAINS "mail-goolge.com" OR sourcentdomain CONTAINS "kcynve-mail.com" OR sourcentdomain CONTAINS "dtiwa.app.link" OR sourcentdomain CONTAINS "share-team.app.link" OR sourcentdomain CONTAINS "mipim.app.link" OR sourcentdomain CONTAINS "processs.app.link" OR sourcentdomain CONTAINS "aws-amazon.app.ink" OR sourcentdomain CONTAINS "clik.sbs" OR sourcentdomain CONTAINS "loading.sbs" OR sourcentdomain CONTAINS "userprofile.live" OR sourcentdomain CONTAINS "requestservice.live" OR sourcentdomain CONTAINS "unt-log.com" OR sourcentdomain CONTAINS "webtech-portal.com" OR sourcentdomain CONTAINS "id-apl.info" OR sourcentdomain CONTAINS "rnanage-icloud.com" OR sourcentdomain CONTAINS "apl.onl" OR sourcentdomain CONTAINS "go-gl.io" OR sourcentdomain CONTAINS "login-my-oauth-mail.ru" OR sourcentdomain CONTAINS "oauth-login-accounts-mail.ru" OR sourcentdomain CONTAINS "my-oauth-accounts-mail.ru" OR sourcentdomain CONTAINS "login-cloud-myaccount-mail.ru" OR sourcentdomain CONTAINS "myaccounts-auth.ru" OR sourcentdomain CONTAINS "security-my-account.ru" OR sourcentdomain CONTAINS "source-place-preference.ru" OR sourcentdomain CONTAINS "safe-place-smartlink.ru" OR sourcentdomain CONTAINS "safe-place-experience.ru" OR sourcentdomain CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "myproject-login.shop" OR sourcehostname CONTAINS "mysite-log.shop" OR sourcehostname CONTAINS "supp-help.me" OR sourcehostname CONTAINS "account-noreply3.xyz" OR sourcehostname CONTAINS "goolge.ltd" OR sourcehostname CONTAINS "goolge.help" OR sourcehostname CONTAINS "account-noreply8.info" OR sourcehostname CONTAINS "account-server.xyz" OR sourcehostname CONTAINS "kcynvd-mail.com" OR sourcehostname CONTAINS "mail-goolge.com" OR sourcehostname CONTAINS "kcynve-mail.com" OR sourcehostname CONTAINS "dtiwa.app.link" OR sourcehostname CONTAINS "share-team.app.link" OR sourcehostname CONTAINS "mipim.app.link" OR sourcehostname CONTAINS "processs.app.link" OR sourcehostname CONTAINS "aws-amazon.app.ink" OR sourcehostname CONTAINS "clik.sbs" OR sourcehostname CONTAINS "loading.sbs" OR sourcehostname CONTAINS "userprofile.live" OR sourcehostname CONTAINS "requestservice.live" OR sourcehostname CONTAINS "unt-log.com" OR sourcehostname CONTAINS "webtech-portal.com" OR sourcehostname CONTAINS "id-apl.info" OR sourcehostname CONTAINS "rnanage-icloud.com" OR sourcehostname CONTAINS "apl.onl" OR sourcehostname CONTAINS "go-gl.io" OR sourcehostname CONTAINS "login-my-oauth-mail.ru" OR sourcehostname CONTAINS "oauth-login-accounts-mail.ru" OR sourcehostname CONTAINS "my-oauth-accounts-mail.ru" OR sourcehostname CONTAINS "login-cloud-myaccount-mail.ru" OR sourcehostname CONTAINS "myaccounts-auth.ru" OR sourcehostname CONTAINS "security-my-account.ru" OR sourcehostname CONTAINS "source-place-preference.ru" OR sourcehostname CONTAINS "safe-place-smartlink.ru" OR sourcehostname CONTAINS "safe-place-experience.ru" OR sourcehostname CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "myproject-login.shop" OR destinationntdomain CONTAINS "mysite-log.shop" OR destinationntdomain CONTAINS "supp-help.me" OR destinationntdomain CONTAINS "account-noreply3.xyz" OR destinationntdomain CONTAINS "goolge.ltd" OR destinationntdomain CONTAINS "goolge.help" OR destinationntdomain CONTAINS "account-noreply8.info" OR destinationntdomain CONTAINS "account-server.xyz" OR destinationntdomain CONTAINS "kcynvd-mail.com" OR destinationntdomain CONTAINS "mail-goolge.com" OR destinationntdomain CONTAINS "kcynve-mail.com" OR destinationntdomain CONTAINS "dtiwa.app.link" OR destinationntdomain CONTAINS "share-team.app.link" OR destinationntdomain CONTAINS "mipim.app.link" OR destinationntdomain CONTAINS "processs.app.link" OR destinationntdomain CONTAINS "aws-amazon.app.ink" OR destinationntdomain CONTAINS "clik.sbs" OR destinationntdomain CONTAINS "loading.sbs" OR destinationntdomain CONTAINS "userprofile.live" OR destinationntdomain CONTAINS "requestservice.live" OR destinationntdomain CONTAINS "unt-log.com" OR destinationntdomain CONTAINS "webtech-portal.com" OR destinationntdomain CONTAINS "id-apl.info" OR destinationntdomain CONTAINS "rnanage-icloud.com" OR destinationntdomain CONTAINS "apl.onl" OR destinationntdomain CONTAINS "go-gl.io" OR destinationntdomain CONTAINS "login-my-oauth-mail.ru" OR destinationntdomain CONTAINS "oauth-login-accounts-mail.ru" OR destinationntdomain CONTAINS "my-oauth-accounts-mail.ru" OR destinationntdomain CONTAINS "login-cloud-myaccount-mail.ru" OR destinationntdomain CONTAINS "myaccounts-auth.ru" OR destinationntdomain CONTAINS "security-my-account.ru" OR destinationntdomain CONTAINS "source-place-preference.ru" OR destinationntdomain CONTAINS "safe-place-smartlink.ru" OR destinationntdomain CONTAINS "safe-place-experience.ru" OR destinationntdomain CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "myproject-login.shop" OR destinationhostname CONTAINS "mysite-log.shop" OR destinationhostname CONTAINS "supp-help.me" OR destinationhostname CONTAINS "account-noreply3.xyz" OR destinationhostname CONTAINS "goolge.ltd" OR destinationhostname CONTAINS "goolge.help" OR destinationhostname CONTAINS "account-noreply8.info" OR destinationhostname CONTAINS "account-server.xyz" OR destinationhostname CONTAINS "kcynvd-mail.com" OR destinationhostname CONTAINS "mail-goolge.com" OR destinationhostname CONTAINS "kcynve-mail.com" OR destinationhostname CONTAINS "dtiwa.app.link" OR destinationhostname CONTAINS "share-team.app.link" OR destinationhostname CONTAINS "mipim.app.link" OR destinationhostname CONTAINS "processs.app.link" OR destinationhostname CONTAINS "aws-amazon.app.ink" OR destinationhostname CONTAINS "clik.sbs" OR destinationhostname CONTAINS "loading.sbs" OR destinationhostname CONTAINS "userprofile.live" OR destinationhostname CONTAINS "requestservice.live" OR destinationhostname CONTAINS "unt-log.com" OR destinationhostname CONTAINS "webtech-portal.com" OR destinationhostname CONTAINS "id-apl.info" OR destinationhostname CONTAINS "rnanage-icloud.com" OR destinationhostname CONTAINS "apl.onl" OR destinationhostname CONTAINS "go-gl.io" OR destinationhostname CONTAINS "login-my-oauth-mail.ru" OR destinationhostname CONTAINS "oauth-login-accounts-mail.ru" OR destinationhostname CONTAINS "my-oauth-accounts-mail.ru" OR destinationhostname CONTAINS "login-cloud-myaccount-mail.ru" OR destinationhostname CONTAINS "myaccounts-auth.ru" OR destinationhostname CONTAINS "security-my-account.ru" OR destinationhostname CONTAINS "source-place-preference.ru" OR destinationhostname CONTAINS "safe-place-smartlink.ru" OR destinationhostname CONTAINS "safe-place-experience.ru" OR destinationhostname CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "myproject-login.shop" OR sourcentdomain CONTAINS "mysite-log.shop" OR sourcentdomain CONTAINS "supp-help.me" OR sourcentdomain CONTAINS "account-noreply3.xyz" OR sourcentdomain CONTAINS "goolge.ltd" OR sourcentdomain CONTAINS "goolge.help" OR sourcentdomain CONTAINS "account-noreply8.info" OR sourcentdomain CONTAINS "account-server.xyz" OR sourcentdomain CONTAINS "kcynvd-mail.com" OR sourcentdomain CONTAINS "mail-goolge.com" OR sourcentdomain CONTAINS "kcynve-mail.com" OR sourcentdomain CONTAINS "dtiwa.app.link" OR sourcentdomain CONTAINS "share-team.app.link" OR sourcentdomain CONTAINS "mipim.app.link" OR sourcentdomain CONTAINS "processs.app.link" OR sourcentdomain CONTAINS "aws-amazon.app.ink" OR sourcentdomain CONTAINS "clik.sbs" OR sourcentdomain CONTAINS "loading.sbs" OR sourcentdomain CONTAINS "userprofile.live" OR sourcentdomain CONTAINS "requestservice.live" OR sourcentdomain CONTAINS "unt-log.com" OR sourcentdomain CONTAINS "webtech-portal.com" OR sourcentdomain CONTAINS "id-apl.info" OR sourcentdomain CONTAINS "rnanage-icloud.com" OR sourcentdomain CONTAINS "apl.onl" OR sourcentdomain CONTAINS "go-gl.io" OR sourcentdomain CONTAINS "login-my-oauth-mail.ru" OR sourcentdomain CONTAINS "oauth-login-accounts-mail.ru" OR sourcentdomain CONTAINS "my-oauth-accounts-mail.ru" OR sourcentdomain CONTAINS "login-cloud-myaccount-mail.ru" OR sourcentdomain CONTAINS "myaccounts-auth.ru" OR sourcentdomain CONTAINS "security-my-account.ru" OR sourcentdomain CONTAINS "source-place-preference.ru" OR sourcentdomain CONTAINS "safe-place-smartlink.ru" OR sourcentdomain CONTAINS "safe-place-experience.ru" OR sourcentdomain CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "myproject-login.shop" OR sourcehostname CONTAINS "mysite-log.shop" OR sourcehostname CONTAINS "supp-help.me" OR sourcehostname CONTAINS "account-noreply3.xyz" OR sourcehostname CONTAINS "goolge.ltd" OR sourcehostname CONTAINS "goolge.help" OR sourcehostname CONTAINS "account-noreply8.info" OR sourcehostname CONTAINS "account-server.xyz" OR sourcehostname CONTAINS "kcynvd-mail.com" OR sourcehostname CONTAINS "mail-goolge.com" OR sourcehostname CONTAINS "kcynve-mail.com" OR sourcehostname CONTAINS "dtiwa.app.link" OR sourcehostname CONTAINS "share-team.app.link" OR sourcehostname CONTAINS "mipim.app.link" OR sourcehostname CONTAINS "processs.app.link" OR sourcehostname CONTAINS "aws-amazon.app.ink" OR sourcehostname CONTAINS "clik.sbs" OR sourcehostname CONTAINS "loading.sbs" OR sourcehostname CONTAINS "userprofile.live" OR sourcehostname CONTAINS "requestservice.live" OR sourcehostname CONTAINS "unt-log.com" OR sourcehostname CONTAINS "webtech-portal.com" OR sourcehostname CONTAINS "id-apl.info" OR sourcehostname CONTAINS "rnanage-icloud.com" OR sourcehostname CONTAINS "apl.onl" OR sourcehostname CONTAINS "go-gl.io" OR sourcehostname CONTAINS "login-my-oauth-mail.ru" OR sourcehostname CONTAINS "oauth-login-accounts-mail.ru" OR sourcehostname CONTAINS "my-oauth-accounts-mail.ru" OR sourcehostname CONTAINS "login-cloud-myaccount-mail.ru" OR sourcehostname CONTAINS "myaccounts-auth.ru" OR sourcehostname CONTAINS "security-my-account.ru" OR sourcehostname CONTAINS "source-place-preference.ru" OR sourcehostname CONTAINS "safe-place-smartlink.ru" OR sourcehostname CONTAINS "safe-place-experience.ru" OR sourcehostname CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "myproject-login.shop" OR destinationntdomain CONTAINS "mysite-log.shop" OR destinationntdomain CONTAINS "supp-help.me" OR destinationntdomain CONTAINS "account-noreply3.xyz" OR destinationntdomain CONTAINS "goolge.ltd" OR destinationntdomain CONTAINS "goolge.help" OR destinationntdomain CONTAINS "account-noreply8.info" OR destinationntdomain CONTAINS "account-server.xyz" OR destinationntdomain CONTAINS "kcynvd-mail.com" OR destinationntdomain CONTAINS "mail-goolge.com" OR destinationntdomain CONTAINS "kcynve-mail.com" OR destinationntdomain CONTAINS "dtiwa.app.link" OR destinationntdomain CONTAINS "share-team.app.link" OR destinationntdomain CONTAINS "mipim.app.link" OR destinationntdomain CONTAINS "processs.app.link" OR destinationntdomain CONTAINS "aws-amazon.app.ink" OR destinationntdomain CONTAINS "clik.sbs" OR destinationntdomain CONTAINS "loading.sbs" OR destinationntdomain CONTAINS "userprofile.live" OR destinationntdomain CONTAINS "requestservice.live" OR destinationntdomain CONTAINS "unt-log.com" OR destinationntdomain CONTAINS "webtech-portal.com" OR destinationntdomain CONTAINS "id-apl.info" OR destinationntdomain CONTAINS "rnanage-icloud.com" OR destinationntdomain CONTAINS "apl.onl" OR destinationntdomain CONTAINS "go-gl.io" OR destinationntdomain CONTAINS "login-my-oauth-mail.ru" OR destinationntdomain CONTAINS "oauth-login-accounts-mail.ru" OR destinationntdomain CONTAINS "my-oauth-accounts-mail.ru" OR destinationntdomain CONTAINS "login-cloud-myaccount-mail.ru" OR destinationntdomain CONTAINS "myaccounts-auth.ru" OR destinationntdomain CONTAINS "security-my-account.ru" OR destinationntdomain CONTAINS "source-place-preference.ru" OR destinationntdomain CONTAINS "safe-place-smartlink.ru" OR destinationntdomain CONTAINS "safe-place-experience.ru" OR destinationntdomain CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "myproject-login.shop" OR destinationhostname CONTAINS "mysite-log.shop" OR destinationhostname CONTAINS "supp-help.me" OR destinationhostname CONTAINS "account-noreply3.xyz" OR destinationhostname CONTAINS "goolge.ltd" OR destinationhostname CONTAINS "goolge.help" OR destinationhostname CONTAINS "account-noreply8.info" OR destinationhostname CONTAINS "account-server.xyz" OR destinationhostname CONTAINS "kcynvd-mail.com" OR destinationhostname CONTAINS "mail-goolge.com" OR destinationhostname CONTAINS "kcynve-mail.com" OR destinationhostname CONTAINS "dtiwa.app.link" OR destinationhostname CONTAINS "share-team.app.link" OR destinationhostname CONTAINS "mipim.app.link" OR destinationhostname CONTAINS "processs.app.link" OR destinationhostname CONTAINS "aws-amazon.app.ink" OR destinationhostname CONTAINS "clik.sbs" OR destinationhostname CONTAINS "loading.sbs" OR destinationhostname CONTAINS "userprofile.live" OR destinationhostname CONTAINS "requestservice.live" OR destinationhostname CONTAINS "unt-log.com" OR destinationhostname CONTAINS "webtech-portal.com" OR destinationhostname CONTAINS "id-apl.info" OR destinationhostname CONTAINS "rnanage-icloud.com" OR destinationhostname CONTAINS "apl.onl" OR destinationhostname CONTAINS "go-gl.io" OR destinationhostname CONTAINS "login-my-oauth-mail.ru" OR destinationhostname CONTAINS "oauth-login-accounts-mail.ru" OR destinationhostname CONTAINS "my-oauth-accounts-mail.ru" OR destinationhostname CONTAINS "login-cloud-myaccount-mail.ru" OR destinationhostname CONTAINS "myaccounts-auth.ru" OR destinationhostname CONTAINS "security-my-account.ru" OR destinationhostname CONTAINS "source-place-preference.ru" OR destinationhostname CONTAINS "safe-place-smartlink.ru" OR destinationhostname CONTAINS "safe-place-experience.ru" OR destinationhostname CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "myproject-login.shop" OR sourcentdomain CONTAINS "mysite-log.shop" OR sourcentdomain CONTAINS "supp-help.me" OR sourcentdomain CONTAINS "account-noreply3.xyz" OR sourcentdomain CONTAINS "goolge.ltd" OR sourcentdomain CONTAINS "goolge.help" OR sourcentdomain CONTAINS "account-noreply8.info" OR sourcentdomain CONTAINS "account-server.xyz" OR sourcentdomain CONTAINS "kcynvd-mail.com" OR sourcentdomain CONTAINS "mail-goolge.com" OR sourcentdomain CONTAINS "kcynve-mail.com" OR sourcentdomain CONTAINS "dtiwa.app.link" OR sourcentdomain CONTAINS "share-team.app.link" OR sourcentdomain CONTAINS "mipim.app.link" OR sourcentdomain CONTAINS "processs.app.link" OR sourcentdomain CONTAINS "aws-amazon.app.ink" OR sourcentdomain CONTAINS "clik.sbs" OR sourcentdomain CONTAINS "loading.sbs" OR sourcentdomain CONTAINS "userprofile.live" OR sourcentdomain CONTAINS "requestservice.live" OR sourcentdomain CONTAINS "unt-log.com" OR sourcentdomain CONTAINS "webtech-portal.com" OR sourcentdomain CONTAINS "id-apl.info" OR sourcentdomain CONTAINS "rnanage-icloud.com" OR sourcentdomain CONTAINS "apl.onl" OR sourcentdomain CONTAINS "go-gl.io" OR sourcentdomain CONTAINS "login-my-oauth-mail.ru" OR sourcentdomain CONTAINS "oauth-login-accounts-mail.ru" OR sourcentdomain CONTAINS "my-oauth-accounts-mail.ru" OR sourcentdomain CONTAINS "login-cloud-myaccount-mail.ru" OR sourcentdomain CONTAINS "myaccounts-auth.ru" OR sourcentdomain CONTAINS "security-my-account.ru" OR sourcentdomain CONTAINS "source-place-preference.ru" OR sourcentdomain CONTAINS "safe-place-smartlink.ru" OR sourcentdomain CONTAINS "safe-place-experience.ru" OR sourcentdomain CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "myproject-login.shop" OR sourcehostname CONTAINS "mysite-log.shop" OR sourcehostname CONTAINS "supp-help.me" OR sourcehostname CONTAINS "account-noreply3.xyz" OR sourcehostname CONTAINS "goolge.ltd" OR sourcehostname CONTAINS "goolge.help" OR sourcehostname CONTAINS "account-noreply8.info" OR sourcehostname CONTAINS "account-server.xyz" OR sourcehostname CONTAINS "kcynvd-mail.com" OR sourcehostname CONTAINS "mail-goolge.com" OR sourcehostname CONTAINS "kcynve-mail.com" OR sourcehostname CONTAINS "dtiwa.app.link" OR sourcehostname CONTAINS "share-team.app.link" OR sourcehostname CONTAINS "mipim.app.link" OR sourcehostname CONTAINS "processs.app.link" OR sourcehostname CONTAINS "aws-amazon.app.ink" OR sourcehostname CONTAINS "clik.sbs" OR sourcehostname CONTAINS "loading.sbs" OR sourcehostname CONTAINS "userprofile.live" OR sourcehostname CONTAINS "requestservice.live" OR sourcehostname CONTAINS "unt-log.com" OR sourcehostname CONTAINS "webtech-portal.com" OR sourcehostname CONTAINS "id-apl.info" OR sourcehostname CONTAINS "rnanage-icloud.com" OR sourcehostname CONTAINS "apl.onl" OR sourcehostname CONTAINS "go-gl.io" OR sourcehostname CONTAINS "login-my-oauth-mail.ru" OR sourcehostname CONTAINS "oauth-login-accounts-mail.ru" OR sourcehostname CONTAINS "my-oauth-accounts-mail.ru" OR sourcehostname CONTAINS "login-cloud-myaccount-mail.ru" OR sourcehostname CONTAINS "myaccounts-auth.ru" OR sourcehostname CONTAINS "security-my-account.ru" OR sourcehostname CONTAINS "source-place-preference.ru" OR sourcehostname CONTAINS "safe-place-smartlink.ru" OR sourcehostname CONTAINS "safe-place-experience.ru" OR sourcehostname CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "myproject-login.shop" OR destinationntdomain CONTAINS "mysite-log.shop" OR destinationntdomain CONTAINS "supp-help.me" OR destinationntdomain CONTAINS "account-noreply3.xyz" OR destinationntdomain CONTAINS "goolge.ltd" OR destinationntdomain CONTAINS "goolge.help" OR destinationntdomain CONTAINS "account-noreply8.info" OR destinationntdomain CONTAINS "account-server.xyz" OR destinationntdomain CONTAINS "kcynvd-mail.com" OR destinationntdomain CONTAINS "mail-goolge.com" OR destinationntdomain CONTAINS "kcynve-mail.com" OR destinationntdomain CONTAINS "dtiwa.app.link" OR destinationntdomain CONTAINS "share-team.app.link" OR destinationntdomain CONTAINS "mipim.app.link" OR destinationntdomain CONTAINS "processs.app.link" OR destinationntdomain CONTAINS "aws-amazon.app.ink" OR destinationntdomain CONTAINS "clik.sbs" OR destinationntdomain CONTAINS "loading.sbs" OR destinationntdomain CONTAINS "userprofile.live" OR destinationntdomain CONTAINS "requestservice.live" OR destinationntdomain CONTAINS "unt-log.com" OR destinationntdomain CONTAINS "webtech-portal.com" OR destinationntdomain CONTAINS "id-apl.info" OR destinationntdomain CONTAINS "rnanage-icloud.com" OR destinationntdomain CONTAINS "apl.onl" OR destinationntdomain CONTAINS "go-gl.io" OR destinationntdomain CONTAINS "login-my-oauth-mail.ru" OR destinationntdomain CONTAINS "oauth-login-accounts-mail.ru" OR destinationntdomain CONTAINS "my-oauth-accounts-mail.ru" OR destinationntdomain CONTAINS "login-cloud-myaccount-mail.ru" OR destinationntdomain CONTAINS "myaccounts-auth.ru" OR destinationntdomain CONTAINS "security-my-account.ru" OR destinationntdomain CONTAINS "source-place-preference.ru" OR destinationntdomain CONTAINS "safe-place-smartlink.ru" OR destinationntdomain CONTAINS "safe-place-experience.ru" OR destinationntdomain CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "myproject-login.shop" OR destinationhostname CONTAINS "mysite-log.shop" OR destinationhostname CONTAINS "supp-help.me" OR destinationhostname CONTAINS "account-noreply3.xyz" OR destinationhostname CONTAINS "goolge.ltd" OR destinationhostname CONTAINS "goolge.help" OR destinationhostname CONTAINS "account-noreply8.info" OR destinationhostname CONTAINS "account-server.xyz" OR destinationhostname CONTAINS "kcynvd-mail.com" OR destinationhostname CONTAINS "mail-goolge.com" OR destinationhostname CONTAINS "kcynve-mail.com" OR destinationhostname CONTAINS "dtiwa.app.link" OR destinationhostname CONTAINS "share-team.app.link" OR destinationhostname CONTAINS "mipim.app.link" OR destinationhostname CONTAINS "processs.app.link" OR destinationhostname CONTAINS "aws-amazon.app.ink" OR destinationhostname CONTAINS "clik.sbs" OR destinationhostname CONTAINS "loading.sbs" OR destinationhostname CONTAINS "userprofile.live" OR destinationhostname CONTAINS "requestservice.live" OR destinationhostname CONTAINS "unt-log.com" OR destinationhostname CONTAINS "webtech-portal.com" OR destinationhostname CONTAINS "id-apl.info" OR destinationhostname CONTAINS "rnanage-icloud.com" OR destinationhostname CONTAINS "apl.onl" OR destinationhostname CONTAINS "go-gl.io" OR destinationhostname CONTAINS "login-my-oauth-mail.ru" OR destinationhostname CONTAINS "oauth-login-accounts-mail.ru" OR destinationhostname CONTAINS "my-oauth-accounts-mail.ru" OR destinationhostname CONTAINS "login-cloud-myaccount-mail.ru" OR destinationhostname CONTAINS "myaccounts-auth.ru" OR destinationhostname CONTAINS "security-my-account.ru" OR destinationhostname CONTAINS "source-place-preference.ru" OR destinationhostname CONTAINS "safe-place-smartlink.ru" OR destinationhostname CONTAINS "safe-place-experience.ru" OR destinationhostname CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "myproject-login.shop" OR sourcentdomain CONTAINS "mysite-log.shop" OR sourcentdomain CONTAINS "supp-help.me" OR sourcentdomain CONTAINS "account-noreply3.xyz" OR sourcentdomain CONTAINS "goolge.ltd" OR sourcentdomain CONTAINS "goolge.help" OR sourcentdomain CONTAINS "account-noreply8.info" OR sourcentdomain CONTAINS "account-server.xyz" OR sourcentdomain CONTAINS "kcynvd-mail.com" OR sourcentdomain CONTAINS "mail-goolge.com" OR sourcentdomain CONTAINS "kcynve-mail.com" OR sourcentdomain CONTAINS "dtiwa.app.link" OR sourcentdomain CONTAINS "share-team.app.link" OR sourcentdomain CONTAINS "mipim.app.link" OR sourcentdomain CONTAINS "processs.app.link" OR sourcentdomain CONTAINS "aws-amazon.app.ink" OR sourcentdomain CONTAINS "clik.sbs" OR sourcentdomain CONTAINS "loading.sbs" OR sourcentdomain CONTAINS "userprofile.live" OR sourcentdomain CONTAINS "requestservice.live" OR sourcentdomain CONTAINS "unt-log.com" OR sourcentdomain CONTAINS "webtech-portal.com" OR sourcentdomain CONTAINS "id-apl.info" OR sourcentdomain CONTAINS "rnanage-icloud.com" OR sourcentdomain CONTAINS "apl.onl" OR sourcentdomain CONTAINS "go-gl.io" OR sourcentdomain CONTAINS "login-my-oauth-mail.ru" OR sourcentdomain CONTAINS "oauth-login-accounts-mail.ru" OR sourcentdomain CONTAINS "my-oauth-accounts-mail.ru" OR sourcentdomain CONTAINS "login-cloud-myaccount-mail.ru" OR sourcentdomain CONTAINS "myaccounts-auth.ru" OR sourcentdomain CONTAINS "security-my-account.ru" OR sourcentdomain CONTAINS "source-place-preference.ru" OR sourcentdomain CONTAINS "safe-place-smartlink.ru" OR sourcentdomain CONTAINS "safe-place-experience.ru" OR sourcentdomain CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "myproject-login.shop" OR sourcehostname CONTAINS "mysite-log.shop" OR sourcehostname CONTAINS "supp-help.me" OR sourcehostname CONTAINS "account-noreply3.xyz" OR sourcehostname CONTAINS "goolge.ltd" OR sourcehostname CONTAINS "goolge.help" OR sourcehostname CONTAINS "account-noreply8.info" OR sourcehostname CONTAINS "account-server.xyz" OR sourcehostname CONTAINS "kcynvd-mail.com" OR sourcehostname CONTAINS "mail-goolge.com" OR sourcehostname CONTAINS "kcynve-mail.com" OR sourcehostname CONTAINS "dtiwa.app.link" OR sourcehostname CONTAINS "share-team.app.link" OR sourcehostname CONTAINS "mipim.app.link" OR sourcehostname CONTAINS "processs.app.link" OR sourcehostname CONTAINS "aws-amazon.app.ink" OR sourcehostname CONTAINS "clik.sbs" OR sourcehostname CONTAINS "loading.sbs" OR sourcehostname CONTAINS "userprofile.live" OR sourcehostname CONTAINS "requestservice.live" OR sourcehostname CONTAINS "unt-log.com" OR sourcehostname CONTAINS "webtech-portal.com" OR sourcehostname CONTAINS "id-apl.info" OR sourcehostname CONTAINS "rnanage-icloud.com" OR sourcehostname CONTAINS "apl.onl" OR sourcehostname CONTAINS "go-gl.io" OR sourcehostname CONTAINS "login-my-oauth-mail.ru" OR sourcehostname CONTAINS "oauth-login-accounts-mail.ru" OR sourcehostname CONTAINS "my-oauth-accounts-mail.ru" OR sourcehostname CONTAINS "login-cloud-myaccount-mail.ru" OR sourcehostname CONTAINS "myaccounts-auth.ru" OR sourcehostname CONTAINS "security-my-account.ru" OR sourcehostname CONTAINS "source-place-preference.ru" OR sourcehostname CONTAINS "safe-place-smartlink.ru" OR sourcehostname CONTAINS "safe-place-experience.ru" OR sourcehostname CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "myproject-login.shop" OR destinationntdomain CONTAINS "mysite-log.shop" OR destinationntdomain CONTAINS "supp-help.me" OR destinationntdomain CONTAINS "account-noreply3.xyz" OR destinationntdomain CONTAINS "goolge.ltd" OR destinationntdomain CONTAINS "goolge.help" OR destinationntdomain CONTAINS "account-noreply8.info" OR destinationntdomain CONTAINS "account-server.xyz" OR destinationntdomain CONTAINS "kcynvd-mail.com" OR destinationntdomain CONTAINS "mail-goolge.com" OR destinationntdomain CONTAINS "kcynve-mail.com" OR destinationntdomain CONTAINS "dtiwa.app.link" OR destinationntdomain CONTAINS "share-team.app.link" OR destinationntdomain CONTAINS "mipim.app.link" OR destinationntdomain CONTAINS "processs.app.link" OR destinationntdomain CONTAINS "aws-amazon.app.ink" OR destinationntdomain CONTAINS "clik.sbs" OR destinationntdomain CONTAINS "loading.sbs" OR destinationntdomain CONTAINS "userprofile.live" OR destinationntdomain CONTAINS "requestservice.live" OR destinationntdomain CONTAINS "unt-log.com" OR destinationntdomain CONTAINS "webtech-portal.com" OR destinationntdomain CONTAINS "id-apl.info" OR destinationntdomain CONTAINS "rnanage-icloud.com" OR destinationntdomain CONTAINS "apl.onl" OR destinationntdomain CONTAINS "go-gl.io" OR destinationntdomain CONTAINS "login-my-oauth-mail.ru" OR destinationntdomain CONTAINS "oauth-login-accounts-mail.ru" OR destinationntdomain CONTAINS "my-oauth-accounts-mail.ru" OR destinationntdomain CONTAINS "login-cloud-myaccount-mail.ru" OR destinationntdomain CONTAINS "myaccounts-auth.ru" OR destinationntdomain CONTAINS "security-my-account.ru" OR destinationntdomain CONTAINS "source-place-preference.ru" OR destinationntdomain CONTAINS "safe-place-smartlink.ru" OR destinationntdomain CONTAINS "safe-place-experience.ru" OR destinationntdomain CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "myproject-login.shop" OR destinationhostname CONTAINS "mysite-log.shop" OR destinationhostname CONTAINS "supp-help.me" OR destinationhostname CONTAINS "account-noreply3.xyz" OR destinationhostname CONTAINS "goolge.ltd" OR destinationhostname CONTAINS "goolge.help" OR destinationhostname CONTAINS "account-noreply8.info" OR destinationhostname CONTAINS "account-server.xyz" OR destinationhostname CONTAINS "kcynvd-mail.com" OR destinationhostname CONTAINS "mail-goolge.com" OR destinationhostname CONTAINS "kcynve-mail.com" OR destinationhostname CONTAINS "dtiwa.app.link" OR destinationhostname CONTAINS "share-team.app.link" OR destinationhostname CONTAINS "mipim.app.link" OR destinationhostname CONTAINS "processs.app.link" OR destinationhostname CONTAINS "aws-amazon.app.ink" OR destinationhostname CONTAINS "clik.sbs" OR destinationhostname CONTAINS "loading.sbs" OR destinationhostname CONTAINS "userprofile.live" OR destinationhostname CONTAINS "requestservice.live" OR destinationhostname CONTAINS "unt-log.com" OR destinationhostname CONTAINS "webtech-portal.com" OR destinationhostname CONTAINS "id-apl.info" OR destinationhostname CONTAINS "rnanage-icloud.com" OR destinationhostname CONTAINS "apl.onl" OR destinationhostname CONTAINS "go-gl.io" OR destinationhostname CONTAINS "login-my-oauth-mail.ru" OR destinationhostname CONTAINS "oauth-login-accounts-mail.ru" OR destinationhostname CONTAINS "my-oauth-accounts-mail.ru" OR destinationhostname CONTAINS "login-cloud-myaccount-mail.ru" OR destinationhostname CONTAINS "myaccounts-auth.ru" OR destinationhostname CONTAINS "security-my-account.ru" OR destinationhostname CONTAINS "source-place-preference.ru" OR destinationhostname CONTAINS "safe-place-smartlink.ru" OR destinationhostname CONTAINS "safe-place-experience.ru" OR destinationhostname CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "myproject-login.shop" OR sourcentdomain CONTAINS "mysite-log.shop" OR sourcentdomain CONTAINS "supp-help.me" OR sourcentdomain CONTAINS "account-noreply3.xyz" OR sourcentdomain CONTAINS "goolge.ltd" OR sourcentdomain CONTAINS "goolge.help" OR sourcentdomain CONTAINS "account-noreply8.info" OR sourcentdomain CONTAINS "account-server.xyz" OR sourcentdomain CONTAINS "kcynvd-mail.com" OR sourcentdomain CONTAINS "mail-goolge.com" OR sourcentdomain CONTAINS "kcynve-mail.com" OR sourcentdomain CONTAINS "dtiwa.app.link" OR sourcentdomain CONTAINS "share-team.app.link" OR sourcentdomain CONTAINS "mipim.app.link" OR sourcentdomain CONTAINS "processs.app.link" OR sourcentdomain CONTAINS "aws-amazon.app.ink" OR sourcentdomain CONTAINS "clik.sbs" OR sourcentdomain CONTAINS "loading.sbs" OR sourcentdomain CONTAINS "userprofile.live" OR sourcentdomain CONTAINS "requestservice.live" OR sourcentdomain CONTAINS "unt-log.com" OR sourcentdomain CONTAINS "webtech-portal.com" OR sourcentdomain CONTAINS "id-apl.info" OR sourcentdomain CONTAINS "rnanage-icloud.com" OR sourcentdomain CONTAINS "apl.onl" OR sourcentdomain CONTAINS "go-gl.io" OR sourcentdomain CONTAINS "login-my-oauth-mail.ru" OR sourcentdomain CONTAINS "oauth-login-accounts-mail.ru" OR sourcentdomain CONTAINS "my-oauth-accounts-mail.ru" OR sourcentdomain CONTAINS "login-cloud-myaccount-mail.ru" OR sourcentdomain CONTAINS "myaccounts-auth.ru" OR sourcentdomain CONTAINS "security-my-account.ru" OR sourcentdomain CONTAINS "source-place-preference.ru" OR sourcentdomain CONTAINS "safe-place-smartlink.ru" OR sourcentdomain CONTAINS "safe-place-experience.ru" OR sourcentdomain CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "myproject-login.shop" OR sourcehostname CONTAINS "mysite-log.shop" OR sourcehostname CONTAINS "supp-help.me" OR sourcehostname CONTAINS "account-noreply3.xyz" OR sourcehostname CONTAINS "goolge.ltd" OR sourcehostname CONTAINS "goolge.help" OR sourcehostname CONTAINS "account-noreply8.info" OR sourcehostname CONTAINS "account-server.xyz" OR sourcehostname CONTAINS "kcynvd-mail.com" OR sourcehostname CONTAINS "mail-goolge.com" OR sourcehostname CONTAINS "kcynve-mail.com" OR sourcehostname CONTAINS "dtiwa.app.link" OR sourcehostname CONTAINS "share-team.app.link" OR sourcehostname CONTAINS "mipim.app.link" OR sourcehostname CONTAINS "processs.app.link" OR sourcehostname CONTAINS "aws-amazon.app.ink" OR sourcehostname CONTAINS "clik.sbs" OR sourcehostname CONTAINS "loading.sbs" OR sourcehostname CONTAINS "userprofile.live" OR sourcehostname CONTAINS "requestservice.live" OR sourcehostname CONTAINS "unt-log.com" OR sourcehostname CONTAINS "webtech-portal.com" OR sourcehostname CONTAINS "id-apl.info" OR sourcehostname CONTAINS "rnanage-icloud.com" OR sourcehostname CONTAINS "apl.onl" OR sourcehostname CONTAINS "go-gl.io" OR sourcehostname CONTAINS "login-my-oauth-mail.ru" OR sourcehostname CONTAINS "oauth-login-accounts-mail.ru" OR sourcehostname CONTAINS "my-oauth-accounts-mail.ru" OR sourcehostname CONTAINS "login-cloud-myaccount-mail.ru" OR sourcehostname CONTAINS "myaccounts-auth.ru" OR sourcehostname CONTAINS "security-my-account.ru" OR sourcehostname CONTAINS "source-place-preference.ru" OR sourcehostname CONTAINS "safe-place-smartlink.ru" OR sourcehostname CONTAINS "safe-place-experience.ru" OR sourcehostname CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "myproject-login.shop" OR destinationntdomain CONTAINS "mysite-log.shop" OR destinationntdomain CONTAINS "supp-help.me" OR destinationntdomain CONTAINS "account-noreply3.xyz" OR destinationntdomain CONTAINS "goolge.ltd" OR destinationntdomain CONTAINS "goolge.help" OR destinationntdomain CONTAINS "account-noreply8.info" OR destinationntdomain CONTAINS "account-server.xyz" OR destinationntdomain CONTAINS "kcynvd-mail.com" OR destinationntdomain CONTAINS "mail-goolge.com" OR destinationntdomain CONTAINS "kcynve-mail.com" OR destinationntdomain CONTAINS "dtiwa.app.link" OR destinationntdomain CONTAINS "share-team.app.link" OR destinationntdomain CONTAINS "mipim.app.link" OR destinationntdomain CONTAINS "processs.app.link" OR destinationntdomain CONTAINS "aws-amazon.app.ink" OR destinationntdomain CONTAINS "clik.sbs" OR destinationntdomain CONTAINS "loading.sbs" OR destinationntdomain CONTAINS "userprofile.live" OR destinationntdomain CONTAINS "requestservice.live" OR destinationntdomain CONTAINS "unt-log.com" OR destinationntdomain CONTAINS "webtech-portal.com" OR destinationntdomain CONTAINS "id-apl.info" OR destinationntdomain CONTAINS "rnanage-icloud.com" OR destinationntdomain CONTAINS "apl.onl" OR destinationntdomain CONTAINS "go-gl.io" OR destinationntdomain CONTAINS "login-my-oauth-mail.ru" OR destinationntdomain CONTAINS "oauth-login-accounts-mail.ru" OR destinationntdomain CONTAINS "my-oauth-accounts-mail.ru" OR destinationntdomain CONTAINS "login-cloud-myaccount-mail.ru" OR destinationntdomain CONTAINS "myaccounts-auth.ru" OR destinationntdomain CONTAINS "security-my-account.ru" OR destinationntdomain CONTAINS "source-place-preference.ru" OR destinationntdomain CONTAINS "safe-place-smartlink.ru" OR destinationntdomain CONTAINS "safe-place-experience.ru" OR destinationntdomain CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "myproject-login.shop" OR destinationhostname CONTAINS "mysite-log.shop" OR destinationhostname CONTAINS "supp-help.me" OR destinationhostname CONTAINS "account-noreply3.xyz" OR destinationhostname CONTAINS "goolge.ltd" OR destinationhostname CONTAINS "goolge.help" OR destinationhostname CONTAINS "account-noreply8.info" OR destinationhostname CONTAINS "account-server.xyz" OR destinationhostname CONTAINS "kcynvd-mail.com" OR destinationhostname CONTAINS "mail-goolge.com" OR destinationhostname CONTAINS "kcynve-mail.com" OR destinationhostname CONTAINS "dtiwa.app.link" OR destinationhostname CONTAINS "share-team.app.link" OR destinationhostname CONTAINS "mipim.app.link" OR destinationhostname CONTAINS "processs.app.link" OR destinationhostname CONTAINS "aws-amazon.app.ink" OR destinationhostname CONTAINS "clik.sbs" OR destinationhostname CONTAINS "loading.sbs" OR destinationhostname CONTAINS "userprofile.live" OR destinationhostname CONTAINS "requestservice.live" OR destinationhostname CONTAINS "unt-log.com" OR destinationhostname CONTAINS "webtech-portal.com" OR destinationhostname CONTAINS "id-apl.info" OR destinationhostname CONTAINS "rnanage-icloud.com" OR destinationhostname CONTAINS "apl.onl" OR destinationhostname CONTAINS "go-gl.io" OR destinationhostname CONTAINS "login-my-oauth-mail.ru" OR destinationhostname CONTAINS "oauth-login-accounts-mail.ru" OR destinationhostname CONTAINS "my-oauth-accounts-mail.ru" OR destinationhostname CONTAINS "login-cloud-myaccount-mail.ru" OR destinationhostname CONTAINS "myaccounts-auth.ru" OR destinationhostname CONTAINS "security-my-account.ru" OR destinationhostname CONTAINS "source-place-preference.ru" OR destinationhostname CONTAINS "safe-place-smartlink.ru" OR destinationhostname CONTAINS "safe-place-experience.ru" OR destinationhostname CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "myproject-login.shop" OR sourcentdomain CONTAINS "mysite-log.shop" OR sourcentdomain CONTAINS "supp-help.me" OR sourcentdomain CONTAINS "account-noreply3.xyz" OR sourcentdomain CONTAINS "goolge.ltd" OR sourcentdomain CONTAINS "goolge.help" OR sourcentdomain CONTAINS "account-noreply8.info" OR sourcentdomain CONTAINS "account-server.xyz" OR sourcentdomain CONTAINS "kcynvd-mail.com" OR sourcentdomain CONTAINS "mail-goolge.com" OR sourcentdomain CONTAINS "kcynve-mail.com" OR sourcentdomain CONTAINS "dtiwa.app.link" OR sourcentdomain CONTAINS "share-team.app.link" OR sourcentdomain CONTAINS "mipim.app.link" OR sourcentdomain CONTAINS "processs.app.link" OR sourcentdomain CONTAINS "aws-amazon.app.ink" OR sourcentdomain CONTAINS "clik.sbs" OR sourcentdomain CONTAINS "loading.sbs" OR sourcentdomain CONTAINS "userprofile.live" OR sourcentdomain CONTAINS "requestservice.live" OR sourcentdomain CONTAINS "unt-log.com" OR sourcentdomain CONTAINS "webtech-portal.com" OR sourcentdomain CONTAINS "id-apl.info" OR sourcentdomain CONTAINS "rnanage-icloud.com" OR sourcentdomain CONTAINS "apl.onl" OR sourcentdomain CONTAINS "go-gl.io" OR sourcentdomain CONTAINS "login-my-oauth-mail.ru" OR sourcentdomain CONTAINS "oauth-login-accounts-mail.ru" OR sourcentdomain CONTAINS "my-oauth-accounts-mail.ru" OR sourcentdomain CONTAINS "login-cloud-myaccount-mail.ru" OR sourcentdomain CONTAINS "myaccounts-auth.ru" OR sourcentdomain CONTAINS "security-my-account.ru" OR sourcentdomain CONTAINS "source-place-preference.ru" OR sourcentdomain CONTAINS "safe-place-smartlink.ru" OR sourcentdomain CONTAINS "safe-place-experience.ru" OR sourcentdomain CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "myproject-login.shop" OR sourcehostname CONTAINS "mysite-log.shop" OR sourcehostname CONTAINS "supp-help.me" OR sourcehostname CONTAINS "account-noreply3.xyz" OR sourcehostname CONTAINS "goolge.ltd" OR sourcehostname CONTAINS "goolge.help" OR sourcehostname CONTAINS "account-noreply8.info" OR sourcehostname CONTAINS "account-server.xyz" OR sourcehostname CONTAINS "kcynvd-mail.com" OR sourcehostname CONTAINS "mail-goolge.com" OR sourcehostname CONTAINS "kcynve-mail.com" OR sourcehostname CONTAINS "dtiwa.app.link" OR sourcehostname CONTAINS "share-team.app.link" OR sourcehostname CONTAINS "mipim.app.link" OR sourcehostname CONTAINS "processs.app.link" OR sourcehostname CONTAINS "aws-amazon.app.ink" OR sourcehostname CONTAINS "clik.sbs" OR sourcehostname CONTAINS "loading.sbs" OR sourcehostname CONTAINS "userprofile.live" OR sourcehostname CONTAINS "requestservice.live" OR sourcehostname CONTAINS "unt-log.com" OR sourcehostname CONTAINS "webtech-portal.com" OR sourcehostname CONTAINS "id-apl.info" OR sourcehostname CONTAINS "rnanage-icloud.com" OR sourcehostname CONTAINS "apl.onl" OR sourcehostname CONTAINS "go-gl.io" OR sourcehostname CONTAINS "login-my-oauth-mail.ru" OR sourcehostname CONTAINS "oauth-login-accounts-mail.ru" OR sourcehostname CONTAINS "my-oauth-accounts-mail.ru" OR sourcehostname CONTAINS "login-cloud-myaccount-mail.ru" OR sourcehostname CONTAINS "myaccounts-auth.ru" OR sourcehostname CONTAINS "security-my-account.ru" OR sourcehostname CONTAINS "source-place-preference.ru" OR sourcehostname CONTAINS "safe-place-smartlink.ru" OR sourcehostname CONTAINS "safe-place-experience.ru" OR sourcehostname CONTAINS "preference-community-place.ru")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "myproject-login.shop" OR destinationntdomain CONTAINS "mysite-log.shop" OR destinationntdomain CONTAINS "supp-help.me" OR destinationntdomain CONTAINS "account-noreply3.xyz" OR destinationntdomain CONTAINS "goolge.ltd" OR destinationntdomain CONTAINS "goolge.help" OR destinationntdomain CONTAINS "account-noreply8.info" OR destinationntdomain CONTAINS "account-server.xyz" OR destinationntdomain CONTAINS "kcynvd-mail.com" OR destinationntdomain CONTAINS "mail-goolge.com" OR destinationntdomain CONTAINS "kcynve-mail.com" OR destinationntdomain CONTAINS "dtiwa.app.link" OR destinationntdomain CONTAINS "share-team.app.link" OR destinationntdomain CONTAINS "mipim.app.link" OR destinationntdomain CONTAINS "processs.app.link" OR destinationntdomain CONTAINS "aws-amazon.app.ink" OR destinationntdomain CONTAINS "clik.sbs" OR destinationntdomain CONTAINS "loading.sbs" OR destinationntdomain CONTAINS "userprofile.live" OR destinationntdomain CONTAINS "requestservice.live" OR destinationntdomain CONTAINS "unt-log.com" OR destinationntdomain CONTAINS "webtech-portal.com" OR destinationntdomain CONTAINS "id-apl.info" OR destinationntdomain CONTAINS "rnanage-icloud.com" OR destinationntdomain CONTAINS "apl.onl" OR destinationntdomain CONTAINS "go-gl.io" OR destinationntdomain CONTAINS "login-my-oauth-mail.ru" OR destinationntdomain CONTAINS "oauth-login-accounts-mail.ru" OR destinationntdomain CONTAINS "my-oauth-accounts-mail.ru" OR destinationntdomain CONTAINS "login-cloud-myaccount-mail.ru" OR destinationntdomain CONTAINS "myaccounts-auth.ru" OR destinationntdomain CONTAINS "security-my-account.ru" OR destinationntdomain CONTAINS "source-place-preference.ru" OR destinationntdomain CONTAINS "safe-place-smartlink.ru" OR destinationntdomain CONTAINS "safe-place-experience.ru" OR destinationntdomain CONTAINS "preference-community-place.ru")
