index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND translatedipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Flow" AND ipaddress NOT NULL AND ipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND translatedipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Web Server" AND ipaddress NOT NULL AND ipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND translatedipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="DNS / DHCP" AND sourceaddress NOT NULL AND sourceaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="DNS / DHCP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Endpoint management systems" AND ipaddress NOT NULL AND ipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Cloud Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Cloud Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Cloud Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Microsoft Windows" AND ipaddress NOT NULL AND ipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Microsoft Windows" AND sourceaddress NOT NULL AND sourceaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Microsoft Windows" AND destinationaddress NOT NULL AND destinationaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Microsoft Windows" AND translatedipaddress NOT NULL AND translatedipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Microsoft Windows" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Cloud Services / Applications" AND ipaddress NOT NULL AND ipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND translatedipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Cloud Application Audit" AND ipaddress NOT NULL AND ipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND translatedipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Authentication / VPN" AND ipaddress NOT NULL AND ipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND translatedipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Unix / Linux / AIX" AND ipaddress NOT NULL AND ipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND translatedipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Network Access Control / NAC" AND ipaddress NOT NULL AND ipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Network Access Control / NAC" AND sourceaddress NOT NULL AND sourceaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationaddress NOT NULL AND destinationaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Network Access Control / NAC" AND translatedipaddress NOT NULL AND translatedipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Virtualization / Containers" AND ipaddress NOT NULL AND ipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Virtualization / Containers" AND sourceaddress NOT NULL AND sourceaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationaddress NOT NULL AND destinationaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Virtualization / Containers" AND translatedipaddress NOT NULL AND translatedipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Access / Privileged User" AND ipaddress NOT NULL AND ipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Access / Privileged User" AND sourceaddress NOT NULL AND sourceaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Access / Privileged User" AND destinationaddress NOT NULL AND destinationaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Access / Privileged User" AND translatedipaddress NOT NULL AND translatedipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Access / Privileged User" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Access / Identity Management" AND ipaddress NOT NULL AND ipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Access / Identity Management" AND sourceaddress NOT NULL AND sourceaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Access / Identity Management" AND destinationaddress NOT NULL AND destinationaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Access / Identity Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Access / Identity Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Identity Access Management" AND ipaddress NOT NULL AND ipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Identity Access Management" AND sourceaddress NOT NULL AND sourceaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Identity Access Management" AND destinationaddress NOT NULL AND destinationaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Identity Access Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Identity Access Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND ipaddress NOT NULL AND ipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND sourceaddress NOT NULL AND sourceaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationaddress NOT NULL AND destinationaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND translatedipaddress NOT NULL AND translatedipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Authentication / WiFi" AND ipaddress NOT NULL AND ipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND translatedipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Cloud Application Security Broker" AND ipaddress NOT NULL AND ipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND translatedipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Source Code Repository" AND ipaddress NOT NULL AND ipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND translatedipaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("5.182.211.5","209.141.33.208","172.245.6.134","195.133.40.71","212.192.241.44","46.249.32.109","130.162.32.102","137.74.155.78","142.93.125.122","152.89.239.12","173.254.204.124","185.245.96.227","45.61.136.130","45.61.186.13","46.29.166.105","84.201.154.133","185.224.129.233","171.22.109.201","212.192.246.183","212.192.246.186")
index=activity AND rg_functionality="Next Generation Firewall" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Next Generation Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Firewall" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Web Proxy" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Web Proxy" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Flow" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Flow" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Web Server" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Web Server" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="DNS / DHCP" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="DNS / DHCP" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="DNS / DHCP" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Web Application Firewall" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Web Application Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Endpoint management systems" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Endpoint management systems" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Cloud Content Management System" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Cloud Content Management System" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Microsoft Windows" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Microsoft Windows" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Microsoft Windows" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Cloud Services / Applications" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Cloud Services / Applications" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Cloud Application Audit" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Cloud Application Audit" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Authentication / VPN" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Authentication / VPN" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Content Management System" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Content Management System" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Unix / Linux / AIX" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Unix / Linux / AIX" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Network Access Control / NAC" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Network Access Control / NAC" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Network Access Control / NAC" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Virtualization / Containers" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Virtualization / Containers" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Virtualization / Containers" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Access / Privileged User" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Access / Privileged User" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Access / Privileged User" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Access / Identity Management" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Access / Identity Management" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Access / Identity Management" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Identity Access Management" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Identity Access Management" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Identity Access Management" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Authentication / WiFi" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Authentication / WiFi" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Authentication / WiFi" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Cloud Application Security Broker" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Cloud Application Security Broker" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Source Code Repository" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Source Code Repository" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("e5822f8f9bc541e696f5520b9ad0e627","39532b27e2dbd9af85f2da7ff4519467","69b51b792b1fca9a268ce7cc1e1857df","70aaa4746150eba8439308096b17d8cc","68ed4532bd6ad79f263715036dee6021","54bd85b40041ba82ae1b57664ee3e958","1b7247a2049da033a94375054829335d","ac4d8d0010775e185e12604c0e304685","0eca53a2dca6384b7b1b7de186e835b5","cc79916e1e472a657a9ae216b2602a7b","8f488f3218baec8b75dc6e42e5c90a47","b307dd0043e94400f8632c4d0c4eae0e","340255b25edf28c8de140f3f00306773","e2b103a3b74dd0bfd98ffd27ed07f2c6","ed6013177b8c7e61f936c14b698c7bdc","89bb874db266e9aa4d9c07e994a0f02d","6a9587b5c95d16ce915c3218aa0ef68c","53526f9affd4d2219e6a33d497ef17f3","831353dd99cae5bb9ae7dcf125bbe46c","ad59c219813642fc8d9af23131db12d1","72e13614d7f45adce589d3ab6a855653","9d2ed5fb9b586cb369b63aea5ee9c49e","4b0b53b2f13ceb16b14f8cf7596682bc","8e26db0a91c6cc2c410764d1f32bbac3","13ead0d75d2fcdf53c7d6d8f40f615f4","015ed26cc1656246177004eab5c059fe","67d2f13fcd2622c85d974a6c41c285a4","f422e76ceead6fb12a1c53a68ed2f554","870e6969eb7db126e945cfd7e9a2ed5f","619517a7ff244de1dc574d2ffb6553d3","478ab4262768222839d51c7ea2e5e46f","03f6aeda4b403cead904240faec8d32f","d3dd19a2ae9228ca71bdf58e3450e205","2a2cc9b33cfefc1f8dcf4eed09666ddc","37f0100946589aeacdc647ccb14e9baa","f422e76ceead6fb12a1c53a68ed2f554","df831e3d07da42cfa5acf95ef97a753a","8c2a26b9171964d12739addb750f2782","9612862c128b5df388258a2e76e811a0")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="DNS / DHCP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="DNS / DHCP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="DNS / DHCP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="DNS / DHCP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Content Management System" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Content Management System" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Microsoft Windows" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Microsoft Windows" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Microsoft Windows" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Microsoft Windows" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Services / Applications" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Services / Applications" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Authentication / VPN" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Authentication / VPN" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Authentication / VPN" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Authentication / VPN" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Content Management System" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Content Management System" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Content Management System" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Content Management System" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Network Access Control / NAC" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Network Access Control / NAC" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Virtualization / Containers" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Virtualization / Containers" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Access / Privileged User" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Access / Privileged User" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Access / Privileged User" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Access / Privileged User" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Access / Identity Management" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Access / Identity Management" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Access / Identity Management" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Access / Identity Management" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Identity Access Management" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Identity Access Management" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Identity Access Management" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Identity Access Management" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Authentication / WiFi" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Authentication / WiFi" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "aurora_life.zerobytes.cc" OR destinationhostname CONTAINS "cherry.1337.cx" OR destinationhostname CONTAINS "offshore.us.to" OR destinationhostname CONTAINS "pear.1337.cx" OR destinationhostname CONTAINS "wpceservice.hldns.ru" OR destinationhostname CONTAINS "goodpackets.cc" OR destinationhostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "aurora_life.zerobytes.cc" OR sourcentdomain CONTAINS "cherry.1337.cx" OR sourcentdomain CONTAINS "offshore.us.to" OR sourcentdomain CONTAINS "pear.1337.cx" OR sourcentdomain CONTAINS "wpceservice.hldns.ru" OR sourcentdomain CONTAINS "goodpackets.cc" OR sourcentdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "aurora_life.zerobytes.cc" OR sourcehostname CONTAINS "cherry.1337.cx" OR sourcehostname CONTAINS "offshore.us.to" OR sourcehostname CONTAINS "pear.1337.cx" OR sourcehostname CONTAINS "wpceservice.hldns.ru" OR sourcehostname CONTAINS "goodpackets.cc" OR sourcehostname CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "aurora_life.zerobytes.cc" OR destinationntdomain CONTAINS "cherry.1337.cx" OR destinationntdomain CONTAINS "offshore.us.to" OR destinationntdomain CONTAINS "pear.1337.cx" OR destinationntdomain CONTAINS "wpceservice.hldns.ru" OR destinationntdomain CONTAINS "goodpackets.cc" OR destinationntdomain CONTAINS "ardp.hldns.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Microsoft Windows" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Content Management System" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Network Access Control / NAC" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Virtualization / Containers" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Access / Privileged User" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Access / Identity Management" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Identity Access Management" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Authentication / WiFi" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc","http://5.182.211.5/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86","http://209.141.33.208/bins/Zeus.arm","http://209.141.33.208/bins/Zeus.arm5","http://209.141.33.208/bins/Zeus.arm6","http://209.141.33.208/bins/Zeus.arm7","http://209.141.33.208/bins/Zeus.m68k","http://209.141.33.208/bins/Zeus.mips","http://209.141.33.208/bins/Zeus.mpsl","http://209.141.33.208/bins/Zeus.ppc","http://209.141.33.208/bins/Zeus.sh4","http://209.141.33.208/bins/Zeus.spc","http://209.141.33.208/bins/Zeus.x86","http://172.245.6.134:80/bins/arc","http://172.245.6.134:80/bins/arm","http://172.245.6.134:80/bins/arm5","http://172.245.6.134:80/bins/arm6","http://172.245.6.134:80/bins/arm7","http://172.245.6.134:80/bins/m68k","http://172.245.6.134:80/bins/mips","http://172.245.6.134:80/bins/mpsl","http://172.245.6.134:80/bins/ppc","http://172.245.6.134:80/bins/sh4","http://172.245.6.134:80/bins/spc","http://172.245.6.134:80/bins/x86","http://172.245.6.134:80/bins/x86","http://188.127.237.5/a-r.m-4.Sakura","http://188.127.237.5/a-r.m-5.Sakura","http://188.127.237.5/a-r.m-6.Sakura","http://188.127.237.5/a-r.m-7.Sakura","http://188.127.237.5/i-5.8-6.Sakura","http://188.127.237.5/m-6.8-k.Sakura","http://188.127.237.5/m-i.p-s.Sakura","http://188.127.237.5/m-p.s-l.Sakura","http://188.127.237.5/p-p.c-.Sakura","http://188.127.237.5/s-h.4-.Sakura","http://188.127.237.5/x-3.2-.Sakura","http://188.127.237.5/x-8.6-.Sakura")
