index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("020ea21556b56229bb9714e721d893df","0789e52f16f5fc4ac2dbebadf53d44ec","18889d70d5546b861c6fa4ec11126942","1ccd2ce1e827b598207cc65e16686b7b","1eed3153b1afae1676ebd0db99ac5802","1f4f537e550e4299a945a97c1f8a0441","28165bb98959e7e7d9be67f0d248b31d","2c95e83759487d78070b56e40843c543","2e7c90c45b3cd8db15cd22e0caacfd40","31515f871cb12d538d53e730e5ddd406","3227c8a45ce4ccf8c475a51b331720c1","46a0071b7e5ea442580a2f80d2fcef42","47c68680c9a00b117764114668357e23","47cf9fda04b2abef75f1eca9804aaebe","496f2a2f14bda410b5f3dcff40bf56c3","4f52ca22d2d28e1ecdb9fba92e4cdde3","4fb7503dd8b21396bf9643e0dce70fcf","4ffd8ae803d7498e2d5a7a7a3a1268f8","5038e5cd4888adb3661d9958f04a1ec1","505724eac0faf0eb32e4ad25ab5cddfe","565a87ba8e79f5e081ea937068082afd","57511cb12fb5f505b3330dfec18f3432","65cbaec27b51d54dc0bceeef298719a8","66ac99b3501846a6c18f2671dbf31873","6b14a4d6212087fe8d88ad012dbc8598","6c7846d955bb5f3842bb7c35fae1569a","72ca000f40335d771936d077d4cabefb","75931e00c81274b1c279d23dfdb0bbad","775c0666a7a482ce664c72ed9195f120","7a4927e1a2aad1bc8ccef956130df0c0","7b8d0b4e718bc543de4a049e23672d79","8690ccd36c9d63b63e8d0278f0449e3b","889e8b93ec0c16ffac62ced220ed8e30","8f4392f839152c9614699048ee4fea11","953d5a3d8e00bbd2dba08579d95c61dc","98bf46542e3e9daa280ef0b395a7dabd","9a57a80692012878fcb463f41ce6dcfa","9d50143836d41726b6564a524453b868","9d9da1992f63776e135c1c1215ee1741","a5fd946bc7e8b12cdfd207790216b4b1","aa3f386f10864f46a09610d0e03a26b5","aeee6b71690a1df75792fcd3d11b8ede","b895d34958be7565888c15a51e0c73c7","b95ba7fb130f95ccae13c54312a69d36","be82532aa428dc5f30107ccfa08da8c6","c43c50baa3271b375298847bf6a7fc13","c4ee082a4ce704dcb3145e2cfd47ef6f","c8ed3353ae9c8b84ea7a9e81d2828193","ca09b19b6975e090fb4eda6ced1847b1","d43e6ae895039108cf68a36140190b0f","daa6ce148e2b8e5fd694183338db6ec9","e166ee1de912bf17453d2da1dc06fc6d","f4a8605fa09e447108eb714eccad57d0","fae63014d33efe844a25f2606de900b6")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("020ea21556b56229bb9714e721d893df","0789e52f16f5fc4ac2dbebadf53d44ec","18889d70d5546b861c6fa4ec11126942","1ccd2ce1e827b598207cc65e16686b7b","1eed3153b1afae1676ebd0db99ac5802","1f4f537e550e4299a945a97c1f8a0441","28165bb98959e7e7d9be67f0d248b31d","2c95e83759487d78070b56e40843c543","2e7c90c45b3cd8db15cd22e0caacfd40","31515f871cb12d538d53e730e5ddd406","3227c8a45ce4ccf8c475a51b331720c1","46a0071b7e5ea442580a2f80d2fcef42","47c68680c9a00b117764114668357e23","47cf9fda04b2abef75f1eca9804aaebe","496f2a2f14bda410b5f3dcff40bf56c3","4f52ca22d2d28e1ecdb9fba92e4cdde3","4fb7503dd8b21396bf9643e0dce70fcf","4ffd8ae803d7498e2d5a7a7a3a1268f8","5038e5cd4888adb3661d9958f04a1ec1","505724eac0faf0eb32e4ad25ab5cddfe","565a87ba8e79f5e081ea937068082afd","57511cb12fb5f505b3330dfec18f3432","65cbaec27b51d54dc0bceeef298719a8","66ac99b3501846a6c18f2671dbf31873","6b14a4d6212087fe8d88ad012dbc8598","6c7846d955bb5f3842bb7c35fae1569a","72ca000f40335d771936d077d4cabefb","75931e00c81274b1c279d23dfdb0bbad","775c0666a7a482ce664c72ed9195f120","7a4927e1a2aad1bc8ccef956130df0c0","7b8d0b4e718bc543de4a049e23672d79","8690ccd36c9d63b63e8d0278f0449e3b","889e8b93ec0c16ffac62ced220ed8e30","8f4392f839152c9614699048ee4fea11","953d5a3d8e00bbd2dba08579d95c61dc","98bf46542e3e9daa280ef0b395a7dabd","9a57a80692012878fcb463f41ce6dcfa","9d50143836d41726b6564a524453b868","9d9da1992f63776e135c1c1215ee1741","a5fd946bc7e8b12cdfd207790216b4b1","aa3f386f10864f46a09610d0e03a26b5","aeee6b71690a1df75792fcd3d11b8ede","b895d34958be7565888c15a51e0c73c7","b95ba7fb130f95ccae13c54312a69d36","be82532aa428dc5f30107ccfa08da8c6","c43c50baa3271b375298847bf6a7fc13","c4ee082a4ce704dcb3145e2cfd47ef6f","c8ed3353ae9c8b84ea7a9e81d2828193","ca09b19b6975e090fb4eda6ced1847b1","d43e6ae895039108cf68a36140190b0f","daa6ce148e2b8e5fd694183338db6ec9","e166ee1de912bf17453d2da1dc06fc6d","f4a8605fa09e447108eb714eccad57d0","fae63014d33efe844a25f2606de900b6")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("020ea21556b56229bb9714e721d893df","0789e52f16f5fc4ac2dbebadf53d44ec","18889d70d5546b861c6fa4ec11126942","1ccd2ce1e827b598207cc65e16686b7b","1eed3153b1afae1676ebd0db99ac5802","1f4f537e550e4299a945a97c1f8a0441","28165bb98959e7e7d9be67f0d248b31d","2c95e83759487d78070b56e40843c543","2e7c90c45b3cd8db15cd22e0caacfd40","31515f871cb12d538d53e730e5ddd406","3227c8a45ce4ccf8c475a51b331720c1","46a0071b7e5ea442580a2f80d2fcef42","47c68680c9a00b117764114668357e23","47cf9fda04b2abef75f1eca9804aaebe","496f2a2f14bda410b5f3dcff40bf56c3","4f52ca22d2d28e1ecdb9fba92e4cdde3","4fb7503dd8b21396bf9643e0dce70fcf","4ffd8ae803d7498e2d5a7a7a3a1268f8","5038e5cd4888adb3661d9958f04a1ec1","505724eac0faf0eb32e4ad25ab5cddfe","565a87ba8e79f5e081ea937068082afd","57511cb12fb5f505b3330dfec18f3432","65cbaec27b51d54dc0bceeef298719a8","66ac99b3501846a6c18f2671dbf31873","6b14a4d6212087fe8d88ad012dbc8598","6c7846d955bb5f3842bb7c35fae1569a","72ca000f40335d771936d077d4cabefb","75931e00c81274b1c279d23dfdb0bbad","775c0666a7a482ce664c72ed9195f120","7a4927e1a2aad1bc8ccef956130df0c0","7b8d0b4e718bc543de4a049e23672d79","8690ccd36c9d63b63e8d0278f0449e3b","889e8b93ec0c16ffac62ced220ed8e30","8f4392f839152c9614699048ee4fea11","953d5a3d8e00bbd2dba08579d95c61dc","98bf46542e3e9daa280ef0b395a7dabd","9a57a80692012878fcb463f41ce6dcfa","9d50143836d41726b6564a524453b868","9d9da1992f63776e135c1c1215ee1741","a5fd946bc7e8b12cdfd207790216b4b1","aa3f386f10864f46a09610d0e03a26b5","aeee6b71690a1df75792fcd3d11b8ede","b895d34958be7565888c15a51e0c73c7","b95ba7fb130f95ccae13c54312a69d36","be82532aa428dc5f30107ccfa08da8c6","c43c50baa3271b375298847bf6a7fc13","c4ee082a4ce704dcb3145e2cfd47ef6f","c8ed3353ae9c8b84ea7a9e81d2828193","ca09b19b6975e090fb4eda6ced1847b1","d43e6ae895039108cf68a36140190b0f","daa6ce148e2b8e5fd694183338db6ec9","e166ee1de912bf17453d2da1dc06fc6d","f4a8605fa09e447108eb714eccad57d0","fae63014d33efe844a25f2606de900b6")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("020ea21556b56229bb9714e721d893df","0789e52f16f5fc4ac2dbebadf53d44ec","18889d70d5546b861c6fa4ec11126942","1ccd2ce1e827b598207cc65e16686b7b","1eed3153b1afae1676ebd0db99ac5802","1f4f537e550e4299a945a97c1f8a0441","28165bb98959e7e7d9be67f0d248b31d","2c95e83759487d78070b56e40843c543","2e7c90c45b3cd8db15cd22e0caacfd40","31515f871cb12d538d53e730e5ddd406","3227c8a45ce4ccf8c475a51b331720c1","46a0071b7e5ea442580a2f80d2fcef42","47c68680c9a00b117764114668357e23","47cf9fda04b2abef75f1eca9804aaebe","496f2a2f14bda410b5f3dcff40bf56c3","4f52ca22d2d28e1ecdb9fba92e4cdde3","4fb7503dd8b21396bf9643e0dce70fcf","4ffd8ae803d7498e2d5a7a7a3a1268f8","5038e5cd4888adb3661d9958f04a1ec1","505724eac0faf0eb32e4ad25ab5cddfe","565a87ba8e79f5e081ea937068082afd","57511cb12fb5f505b3330dfec18f3432","65cbaec27b51d54dc0bceeef298719a8","66ac99b3501846a6c18f2671dbf31873","6b14a4d6212087fe8d88ad012dbc8598","6c7846d955bb5f3842bb7c35fae1569a","72ca000f40335d771936d077d4cabefb","75931e00c81274b1c279d23dfdb0bbad","775c0666a7a482ce664c72ed9195f120","7a4927e1a2aad1bc8ccef956130df0c0","7b8d0b4e718bc543de4a049e23672d79","8690ccd36c9d63b63e8d0278f0449e3b","889e8b93ec0c16ffac62ced220ed8e30","8f4392f839152c9614699048ee4fea11","953d5a3d8e00bbd2dba08579d95c61dc","98bf46542e3e9daa280ef0b395a7dabd","9a57a80692012878fcb463f41ce6dcfa","9d50143836d41726b6564a524453b868","9d9da1992f63776e135c1c1215ee1741","a5fd946bc7e8b12cdfd207790216b4b1","aa3f386f10864f46a09610d0e03a26b5","aeee6b71690a1df75792fcd3d11b8ede","b895d34958be7565888c15a51e0c73c7","b95ba7fb130f95ccae13c54312a69d36","be82532aa428dc5f30107ccfa08da8c6","c43c50baa3271b375298847bf6a7fc13","c4ee082a4ce704dcb3145e2cfd47ef6f","c8ed3353ae9c8b84ea7a9e81d2828193","ca09b19b6975e090fb4eda6ced1847b1","d43e6ae895039108cf68a36140190b0f","daa6ce148e2b8e5fd694183338db6ec9","e166ee1de912bf17453d2da1dc06fc6d","f4a8605fa09e447108eb714eccad57d0","fae63014d33efe844a25f2606de900b6")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("020ea21556b56229bb9714e721d893df","0789e52f16f5fc4ac2dbebadf53d44ec","18889d70d5546b861c6fa4ec11126942","1ccd2ce1e827b598207cc65e16686b7b","1eed3153b1afae1676ebd0db99ac5802","1f4f537e550e4299a945a97c1f8a0441","28165bb98959e7e7d9be67f0d248b31d","2c95e83759487d78070b56e40843c543","2e7c90c45b3cd8db15cd22e0caacfd40","31515f871cb12d538d53e730e5ddd406","3227c8a45ce4ccf8c475a51b331720c1","46a0071b7e5ea442580a2f80d2fcef42","47c68680c9a00b117764114668357e23","47cf9fda04b2abef75f1eca9804aaebe","496f2a2f14bda410b5f3dcff40bf56c3","4f52ca22d2d28e1ecdb9fba92e4cdde3","4fb7503dd8b21396bf9643e0dce70fcf","4ffd8ae803d7498e2d5a7a7a3a1268f8","5038e5cd4888adb3661d9958f04a1ec1","505724eac0faf0eb32e4ad25ab5cddfe","565a87ba8e79f5e081ea937068082afd","57511cb12fb5f505b3330dfec18f3432","65cbaec27b51d54dc0bceeef298719a8","66ac99b3501846a6c18f2671dbf31873","6b14a4d6212087fe8d88ad012dbc8598","6c7846d955bb5f3842bb7c35fae1569a","72ca000f40335d771936d077d4cabefb","75931e00c81274b1c279d23dfdb0bbad","775c0666a7a482ce664c72ed9195f120","7a4927e1a2aad1bc8ccef956130df0c0","7b8d0b4e718bc543de4a049e23672d79","8690ccd36c9d63b63e8d0278f0449e3b","889e8b93ec0c16ffac62ced220ed8e30","8f4392f839152c9614699048ee4fea11","953d5a3d8e00bbd2dba08579d95c61dc","98bf46542e3e9daa280ef0b395a7dabd","9a57a80692012878fcb463f41ce6dcfa","9d50143836d41726b6564a524453b868","9d9da1992f63776e135c1c1215ee1741","a5fd946bc7e8b12cdfd207790216b4b1","aa3f386f10864f46a09610d0e03a26b5","aeee6b71690a1df75792fcd3d11b8ede","b895d34958be7565888c15a51e0c73c7","b95ba7fb130f95ccae13c54312a69d36","be82532aa428dc5f30107ccfa08da8c6","c43c50baa3271b375298847bf6a7fc13","c4ee082a4ce704dcb3145e2cfd47ef6f","c8ed3353ae9c8b84ea7a9e81d2828193","ca09b19b6975e090fb4eda6ced1847b1","d43e6ae895039108cf68a36140190b0f","daa6ce148e2b8e5fd694183338db6ec9","e166ee1de912bf17453d2da1dc06fc6d","f4a8605fa09e447108eb714eccad57d0","fae63014d33efe844a25f2606de900b6")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("020ea21556b56229bb9714e721d893df","0789e52f16f5fc4ac2dbebadf53d44ec","18889d70d5546b861c6fa4ec11126942","1ccd2ce1e827b598207cc65e16686b7b","1eed3153b1afae1676ebd0db99ac5802","1f4f537e550e4299a945a97c1f8a0441","28165bb98959e7e7d9be67f0d248b31d","2c95e83759487d78070b56e40843c543","2e7c90c45b3cd8db15cd22e0caacfd40","31515f871cb12d538d53e730e5ddd406","3227c8a45ce4ccf8c475a51b331720c1","46a0071b7e5ea442580a2f80d2fcef42","47c68680c9a00b117764114668357e23","47cf9fda04b2abef75f1eca9804aaebe","496f2a2f14bda410b5f3dcff40bf56c3","4f52ca22d2d28e1ecdb9fba92e4cdde3","4fb7503dd8b21396bf9643e0dce70fcf","4ffd8ae803d7498e2d5a7a7a3a1268f8","5038e5cd4888adb3661d9958f04a1ec1","505724eac0faf0eb32e4ad25ab5cddfe","565a87ba8e79f5e081ea937068082afd","57511cb12fb5f505b3330dfec18f3432","65cbaec27b51d54dc0bceeef298719a8","66ac99b3501846a6c18f2671dbf31873","6b14a4d6212087fe8d88ad012dbc8598","6c7846d955bb5f3842bb7c35fae1569a","72ca000f40335d771936d077d4cabefb","75931e00c81274b1c279d23dfdb0bbad","775c0666a7a482ce664c72ed9195f120","7a4927e1a2aad1bc8ccef956130df0c0","7b8d0b4e718bc543de4a049e23672d79","8690ccd36c9d63b63e8d0278f0449e3b","889e8b93ec0c16ffac62ced220ed8e30","8f4392f839152c9614699048ee4fea11","953d5a3d8e00bbd2dba08579d95c61dc","98bf46542e3e9daa280ef0b395a7dabd","9a57a80692012878fcb463f41ce6dcfa","9d50143836d41726b6564a524453b868","9d9da1992f63776e135c1c1215ee1741","a5fd946bc7e8b12cdfd207790216b4b1","aa3f386f10864f46a09610d0e03a26b5","aeee6b71690a1df75792fcd3d11b8ede","b895d34958be7565888c15a51e0c73c7","b95ba7fb130f95ccae13c54312a69d36","be82532aa428dc5f30107ccfa08da8c6","c43c50baa3271b375298847bf6a7fc13","c4ee082a4ce704dcb3145e2cfd47ef6f","c8ed3353ae9c8b84ea7a9e81d2828193","ca09b19b6975e090fb4eda6ced1847b1","d43e6ae895039108cf68a36140190b0f","daa6ce148e2b8e5fd694183338db6ec9","e166ee1de912bf17453d2da1dc06fc6d","f4a8605fa09e447108eb714eccad57d0","fae63014d33efe844a25f2606de900b6")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("020ea21556b56229bb9714e721d893df","0789e52f16f5fc4ac2dbebadf53d44ec","18889d70d5546b861c6fa4ec11126942","1ccd2ce1e827b598207cc65e16686b7b","1eed3153b1afae1676ebd0db99ac5802","1f4f537e550e4299a945a97c1f8a0441","28165bb98959e7e7d9be67f0d248b31d","2c95e83759487d78070b56e40843c543","2e7c90c45b3cd8db15cd22e0caacfd40","31515f871cb12d538d53e730e5ddd406","3227c8a45ce4ccf8c475a51b331720c1","46a0071b7e5ea442580a2f80d2fcef42","47c68680c9a00b117764114668357e23","47cf9fda04b2abef75f1eca9804aaebe","496f2a2f14bda410b5f3dcff40bf56c3","4f52ca22d2d28e1ecdb9fba92e4cdde3","4fb7503dd8b21396bf9643e0dce70fcf","4ffd8ae803d7498e2d5a7a7a3a1268f8","5038e5cd4888adb3661d9958f04a1ec1","505724eac0faf0eb32e4ad25ab5cddfe","565a87ba8e79f5e081ea937068082afd","57511cb12fb5f505b3330dfec18f3432","65cbaec27b51d54dc0bceeef298719a8","66ac99b3501846a6c18f2671dbf31873","6b14a4d6212087fe8d88ad012dbc8598","6c7846d955bb5f3842bb7c35fae1569a","72ca000f40335d771936d077d4cabefb","75931e00c81274b1c279d23dfdb0bbad","775c0666a7a482ce664c72ed9195f120","7a4927e1a2aad1bc8ccef956130df0c0","7b8d0b4e718bc543de4a049e23672d79","8690ccd36c9d63b63e8d0278f0449e3b","889e8b93ec0c16ffac62ced220ed8e30","8f4392f839152c9614699048ee4fea11","953d5a3d8e00bbd2dba08579d95c61dc","98bf46542e3e9daa280ef0b395a7dabd","9a57a80692012878fcb463f41ce6dcfa","9d50143836d41726b6564a524453b868","9d9da1992f63776e135c1c1215ee1741","a5fd946bc7e8b12cdfd207790216b4b1","aa3f386f10864f46a09610d0e03a26b5","aeee6b71690a1df75792fcd3d11b8ede","b895d34958be7565888c15a51e0c73c7","b95ba7fb130f95ccae13c54312a69d36","be82532aa428dc5f30107ccfa08da8c6","c43c50baa3271b375298847bf6a7fc13","c4ee082a4ce704dcb3145e2cfd47ef6f","c8ed3353ae9c8b84ea7a9e81d2828193","ca09b19b6975e090fb4eda6ced1847b1","d43e6ae895039108cf68a36140190b0f","daa6ce148e2b8e5fd694183338db6ec9","e166ee1de912bf17453d2da1dc06fc6d","f4a8605fa09e447108eb714eccad57d0","fae63014d33efe844a25f2606de900b6")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("020ea21556b56229bb9714e721d893df","0789e52f16f5fc4ac2dbebadf53d44ec","18889d70d5546b861c6fa4ec11126942","1ccd2ce1e827b598207cc65e16686b7b","1eed3153b1afae1676ebd0db99ac5802","1f4f537e550e4299a945a97c1f8a0441","28165bb98959e7e7d9be67f0d248b31d","2c95e83759487d78070b56e40843c543","2e7c90c45b3cd8db15cd22e0caacfd40","31515f871cb12d538d53e730e5ddd406","3227c8a45ce4ccf8c475a51b331720c1","46a0071b7e5ea442580a2f80d2fcef42","47c68680c9a00b117764114668357e23","47cf9fda04b2abef75f1eca9804aaebe","496f2a2f14bda410b5f3dcff40bf56c3","4f52ca22d2d28e1ecdb9fba92e4cdde3","4fb7503dd8b21396bf9643e0dce70fcf","4ffd8ae803d7498e2d5a7a7a3a1268f8","5038e5cd4888adb3661d9958f04a1ec1","505724eac0faf0eb32e4ad25ab5cddfe","565a87ba8e79f5e081ea937068082afd","57511cb12fb5f505b3330dfec18f3432","65cbaec27b51d54dc0bceeef298719a8","66ac99b3501846a6c18f2671dbf31873","6b14a4d6212087fe8d88ad012dbc8598","6c7846d955bb5f3842bb7c35fae1569a","72ca000f40335d771936d077d4cabefb","75931e00c81274b1c279d23dfdb0bbad","775c0666a7a482ce664c72ed9195f120","7a4927e1a2aad1bc8ccef956130df0c0","7b8d0b4e718bc543de4a049e23672d79","8690ccd36c9d63b63e8d0278f0449e3b","889e8b93ec0c16ffac62ced220ed8e30","8f4392f839152c9614699048ee4fea11","953d5a3d8e00bbd2dba08579d95c61dc","98bf46542e3e9daa280ef0b395a7dabd","9a57a80692012878fcb463f41ce6dcfa","9d50143836d41726b6564a524453b868","9d9da1992f63776e135c1c1215ee1741","a5fd946bc7e8b12cdfd207790216b4b1","aa3f386f10864f46a09610d0e03a26b5","aeee6b71690a1df75792fcd3d11b8ede","b895d34958be7565888c15a51e0c73c7","b95ba7fb130f95ccae13c54312a69d36","be82532aa428dc5f30107ccfa08da8c6","c43c50baa3271b375298847bf6a7fc13","c4ee082a4ce704dcb3145e2cfd47ef6f","c8ed3353ae9c8b84ea7a9e81d2828193","ca09b19b6975e090fb4eda6ced1847b1","d43e6ae895039108cf68a36140190b0f","daa6ce148e2b8e5fd694183338db6ec9","e166ee1de912bf17453d2da1dc06fc6d","f4a8605fa09e447108eb714eccad57d0","fae63014d33efe844a25f2606de900b6")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("020ea21556b56229bb9714e721d893df","0789e52f16f5fc4ac2dbebadf53d44ec","18889d70d5546b861c6fa4ec11126942","1ccd2ce1e827b598207cc65e16686b7b","1eed3153b1afae1676ebd0db99ac5802","1f4f537e550e4299a945a97c1f8a0441","28165bb98959e7e7d9be67f0d248b31d","2c95e83759487d78070b56e40843c543","2e7c90c45b3cd8db15cd22e0caacfd40","31515f871cb12d538d53e730e5ddd406","3227c8a45ce4ccf8c475a51b331720c1","46a0071b7e5ea442580a2f80d2fcef42","47c68680c9a00b117764114668357e23","47cf9fda04b2abef75f1eca9804aaebe","496f2a2f14bda410b5f3dcff40bf56c3","4f52ca22d2d28e1ecdb9fba92e4cdde3","4fb7503dd8b21396bf9643e0dce70fcf","4ffd8ae803d7498e2d5a7a7a3a1268f8","5038e5cd4888adb3661d9958f04a1ec1","505724eac0faf0eb32e4ad25ab5cddfe","565a87ba8e79f5e081ea937068082afd","57511cb12fb5f505b3330dfec18f3432","65cbaec27b51d54dc0bceeef298719a8","66ac99b3501846a6c18f2671dbf31873","6b14a4d6212087fe8d88ad012dbc8598","6c7846d955bb5f3842bb7c35fae1569a","72ca000f40335d771936d077d4cabefb","75931e00c81274b1c279d23dfdb0bbad","775c0666a7a482ce664c72ed9195f120","7a4927e1a2aad1bc8ccef956130df0c0","7b8d0b4e718bc543de4a049e23672d79","8690ccd36c9d63b63e8d0278f0449e3b","889e8b93ec0c16ffac62ced220ed8e30","8f4392f839152c9614699048ee4fea11","953d5a3d8e00bbd2dba08579d95c61dc","98bf46542e3e9daa280ef0b395a7dabd","9a57a80692012878fcb463f41ce6dcfa","9d50143836d41726b6564a524453b868","9d9da1992f63776e135c1c1215ee1741","a5fd946bc7e8b12cdfd207790216b4b1","aa3f386f10864f46a09610d0e03a26b5","aeee6b71690a1df75792fcd3d11b8ede","b895d34958be7565888c15a51e0c73c7","b95ba7fb130f95ccae13c54312a69d36","be82532aa428dc5f30107ccfa08da8c6","c43c50baa3271b375298847bf6a7fc13","c4ee082a4ce704dcb3145e2cfd47ef6f","c8ed3353ae9c8b84ea7a9e81d2828193","ca09b19b6975e090fb4eda6ced1847b1","d43e6ae895039108cf68a36140190b0f","daa6ce148e2b8e5fd694183338db6ec9","e166ee1de912bf17453d2da1dc06fc6d","f4a8605fa09e447108eb714eccad57d0","fae63014d33efe844a25f2606de900b6")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("020ea21556b56229bb9714e721d893df","0789e52f16f5fc4ac2dbebadf53d44ec","18889d70d5546b861c6fa4ec11126942","1ccd2ce1e827b598207cc65e16686b7b","1eed3153b1afae1676ebd0db99ac5802","1f4f537e550e4299a945a97c1f8a0441","28165bb98959e7e7d9be67f0d248b31d","2c95e83759487d78070b56e40843c543","2e7c90c45b3cd8db15cd22e0caacfd40","31515f871cb12d538d53e730e5ddd406","3227c8a45ce4ccf8c475a51b331720c1","46a0071b7e5ea442580a2f80d2fcef42","47c68680c9a00b117764114668357e23","47cf9fda04b2abef75f1eca9804aaebe","496f2a2f14bda410b5f3dcff40bf56c3","4f52ca22d2d28e1ecdb9fba92e4cdde3","4fb7503dd8b21396bf9643e0dce70fcf","4ffd8ae803d7498e2d5a7a7a3a1268f8","5038e5cd4888adb3661d9958f04a1ec1","505724eac0faf0eb32e4ad25ab5cddfe","565a87ba8e79f5e081ea937068082afd","57511cb12fb5f505b3330dfec18f3432","65cbaec27b51d54dc0bceeef298719a8","66ac99b3501846a6c18f2671dbf31873","6b14a4d6212087fe8d88ad012dbc8598","6c7846d955bb5f3842bb7c35fae1569a","72ca000f40335d771936d077d4cabefb","75931e00c81274b1c279d23dfdb0bbad","775c0666a7a482ce664c72ed9195f120","7a4927e1a2aad1bc8ccef956130df0c0","7b8d0b4e718bc543de4a049e23672d79","8690ccd36c9d63b63e8d0278f0449e3b","889e8b93ec0c16ffac62ced220ed8e30","8f4392f839152c9614699048ee4fea11","953d5a3d8e00bbd2dba08579d95c61dc","98bf46542e3e9daa280ef0b395a7dabd","9a57a80692012878fcb463f41ce6dcfa","9d50143836d41726b6564a524453b868","9d9da1992f63776e135c1c1215ee1741","a5fd946bc7e8b12cdfd207790216b4b1","aa3f386f10864f46a09610d0e03a26b5","aeee6b71690a1df75792fcd3d11b8ede","b895d34958be7565888c15a51e0c73c7","b95ba7fb130f95ccae13c54312a69d36","be82532aa428dc5f30107ccfa08da8c6","c43c50baa3271b375298847bf6a7fc13","c4ee082a4ce704dcb3145e2cfd47ef6f","c8ed3353ae9c8b84ea7a9e81d2828193","ca09b19b6975e090fb4eda6ced1847b1","d43e6ae895039108cf68a36140190b0f","daa6ce148e2b8e5fd694183338db6ec9","e166ee1de912bf17453d2da1dc06fc6d","f4a8605fa09e447108eb714eccad57d0","fae63014d33efe844a25f2606de900b6")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("020ea21556b56229bb9714e721d893df","0789e52f16f5fc4ac2dbebadf53d44ec","18889d70d5546b861c6fa4ec11126942","1ccd2ce1e827b598207cc65e16686b7b","1eed3153b1afae1676ebd0db99ac5802","1f4f537e550e4299a945a97c1f8a0441","28165bb98959e7e7d9be67f0d248b31d","2c95e83759487d78070b56e40843c543","2e7c90c45b3cd8db15cd22e0caacfd40","31515f871cb12d538d53e730e5ddd406","3227c8a45ce4ccf8c475a51b331720c1","46a0071b7e5ea442580a2f80d2fcef42","47c68680c9a00b117764114668357e23","47cf9fda04b2abef75f1eca9804aaebe","496f2a2f14bda410b5f3dcff40bf56c3","4f52ca22d2d28e1ecdb9fba92e4cdde3","4fb7503dd8b21396bf9643e0dce70fcf","4ffd8ae803d7498e2d5a7a7a3a1268f8","5038e5cd4888adb3661d9958f04a1ec1","505724eac0faf0eb32e4ad25ab5cddfe","565a87ba8e79f5e081ea937068082afd","57511cb12fb5f505b3330dfec18f3432","65cbaec27b51d54dc0bceeef298719a8","66ac99b3501846a6c18f2671dbf31873","6b14a4d6212087fe8d88ad012dbc8598","6c7846d955bb5f3842bb7c35fae1569a","72ca000f40335d771936d077d4cabefb","75931e00c81274b1c279d23dfdb0bbad","775c0666a7a482ce664c72ed9195f120","7a4927e1a2aad1bc8ccef956130df0c0","7b8d0b4e718bc543de4a049e23672d79","8690ccd36c9d63b63e8d0278f0449e3b","889e8b93ec0c16ffac62ced220ed8e30","8f4392f839152c9614699048ee4fea11","953d5a3d8e00bbd2dba08579d95c61dc","98bf46542e3e9daa280ef0b395a7dabd","9a57a80692012878fcb463f41ce6dcfa","9d50143836d41726b6564a524453b868","9d9da1992f63776e135c1c1215ee1741","a5fd946bc7e8b12cdfd207790216b4b1","aa3f386f10864f46a09610d0e03a26b5","aeee6b71690a1df75792fcd3d11b8ede","b895d34958be7565888c15a51e0c73c7","b95ba7fb130f95ccae13c54312a69d36","be82532aa428dc5f30107ccfa08da8c6","c43c50baa3271b375298847bf6a7fc13","c4ee082a4ce704dcb3145e2cfd47ef6f","c8ed3353ae9c8b84ea7a9e81d2828193","ca09b19b6975e090fb4eda6ced1847b1","d43e6ae895039108cf68a36140190b0f","daa6ce148e2b8e5fd694183338db6ec9","e166ee1de912bf17453d2da1dc06fc6d","f4a8605fa09e447108eb714eccad57d0","fae63014d33efe844a25f2606de900b6")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("020ea21556b56229bb9714e721d893df","0789e52f16f5fc4ac2dbebadf53d44ec","18889d70d5546b861c6fa4ec11126942","1ccd2ce1e827b598207cc65e16686b7b","1eed3153b1afae1676ebd0db99ac5802","1f4f537e550e4299a945a97c1f8a0441","28165bb98959e7e7d9be67f0d248b31d","2c95e83759487d78070b56e40843c543","2e7c90c45b3cd8db15cd22e0caacfd40","31515f871cb12d538d53e730e5ddd406","3227c8a45ce4ccf8c475a51b331720c1","46a0071b7e5ea442580a2f80d2fcef42","47c68680c9a00b117764114668357e23","47cf9fda04b2abef75f1eca9804aaebe","496f2a2f14bda410b5f3dcff40bf56c3","4f52ca22d2d28e1ecdb9fba92e4cdde3","4fb7503dd8b21396bf9643e0dce70fcf","4ffd8ae803d7498e2d5a7a7a3a1268f8","5038e5cd4888adb3661d9958f04a1ec1","505724eac0faf0eb32e4ad25ab5cddfe","565a87ba8e79f5e081ea937068082afd","57511cb12fb5f505b3330dfec18f3432","65cbaec27b51d54dc0bceeef298719a8","66ac99b3501846a6c18f2671dbf31873","6b14a4d6212087fe8d88ad012dbc8598","6c7846d955bb5f3842bb7c35fae1569a","72ca000f40335d771936d077d4cabefb","75931e00c81274b1c279d23dfdb0bbad","775c0666a7a482ce664c72ed9195f120","7a4927e1a2aad1bc8ccef956130df0c0","7b8d0b4e718bc543de4a049e23672d79","8690ccd36c9d63b63e8d0278f0449e3b","889e8b93ec0c16ffac62ced220ed8e30","8f4392f839152c9614699048ee4fea11","953d5a3d8e00bbd2dba08579d95c61dc","98bf46542e3e9daa280ef0b395a7dabd","9a57a80692012878fcb463f41ce6dcfa","9d50143836d41726b6564a524453b868","9d9da1992f63776e135c1c1215ee1741","a5fd946bc7e8b12cdfd207790216b4b1","aa3f386f10864f46a09610d0e03a26b5","aeee6b71690a1df75792fcd3d11b8ede","b895d34958be7565888c15a51e0c73c7","b95ba7fb130f95ccae13c54312a69d36","be82532aa428dc5f30107ccfa08da8c6","c43c50baa3271b375298847bf6a7fc13","c4ee082a4ce704dcb3145e2cfd47ef6f","c8ed3353ae9c8b84ea7a9e81d2828193","ca09b19b6975e090fb4eda6ced1847b1","d43e6ae895039108cf68a36140190b0f","daa6ce148e2b8e5fd694183338db6ec9","e166ee1de912bf17453d2da1dc06fc6d","f4a8605fa09e447108eb714eccad57d0","fae63014d33efe844a25f2606de900b6")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("020ea21556b56229bb9714e721d893df","0789e52f16f5fc4ac2dbebadf53d44ec","18889d70d5546b861c6fa4ec11126942","1ccd2ce1e827b598207cc65e16686b7b","1eed3153b1afae1676ebd0db99ac5802","1f4f537e550e4299a945a97c1f8a0441","28165bb98959e7e7d9be67f0d248b31d","2c95e83759487d78070b56e40843c543","2e7c90c45b3cd8db15cd22e0caacfd40","31515f871cb12d538d53e730e5ddd406","3227c8a45ce4ccf8c475a51b331720c1","46a0071b7e5ea442580a2f80d2fcef42","47c68680c9a00b117764114668357e23","47cf9fda04b2abef75f1eca9804aaebe","496f2a2f14bda410b5f3dcff40bf56c3","4f52ca22d2d28e1ecdb9fba92e4cdde3","4fb7503dd8b21396bf9643e0dce70fcf","4ffd8ae803d7498e2d5a7a7a3a1268f8","5038e5cd4888adb3661d9958f04a1ec1","505724eac0faf0eb32e4ad25ab5cddfe","565a87ba8e79f5e081ea937068082afd","57511cb12fb5f505b3330dfec18f3432","65cbaec27b51d54dc0bceeef298719a8","66ac99b3501846a6c18f2671dbf31873","6b14a4d6212087fe8d88ad012dbc8598","6c7846d955bb5f3842bb7c35fae1569a","72ca000f40335d771936d077d4cabefb","75931e00c81274b1c279d23dfdb0bbad","775c0666a7a482ce664c72ed9195f120","7a4927e1a2aad1bc8ccef956130df0c0","7b8d0b4e718bc543de4a049e23672d79","8690ccd36c9d63b63e8d0278f0449e3b","889e8b93ec0c16ffac62ced220ed8e30","8f4392f839152c9614699048ee4fea11","953d5a3d8e00bbd2dba08579d95c61dc","98bf46542e3e9daa280ef0b395a7dabd","9a57a80692012878fcb463f41ce6dcfa","9d50143836d41726b6564a524453b868","9d9da1992f63776e135c1c1215ee1741","a5fd946bc7e8b12cdfd207790216b4b1","aa3f386f10864f46a09610d0e03a26b5","aeee6b71690a1df75792fcd3d11b8ede","b895d34958be7565888c15a51e0c73c7","b95ba7fb130f95ccae13c54312a69d36","be82532aa428dc5f30107ccfa08da8c6","c43c50baa3271b375298847bf6a7fc13","c4ee082a4ce704dcb3145e2cfd47ef6f","c8ed3353ae9c8b84ea7a9e81d2828193","ca09b19b6975e090fb4eda6ced1847b1","d43e6ae895039108cf68a36140190b0f","daa6ce148e2b8e5fd694183338db6ec9","e166ee1de912bf17453d2da1dc06fc6d","f4a8605fa09e447108eb714eccad57d0","fae63014d33efe844a25f2606de900b6")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("020ea21556b56229bb9714e721d893df","0789e52f16f5fc4ac2dbebadf53d44ec","18889d70d5546b861c6fa4ec11126942","1ccd2ce1e827b598207cc65e16686b7b","1eed3153b1afae1676ebd0db99ac5802","1f4f537e550e4299a945a97c1f8a0441","28165bb98959e7e7d9be67f0d248b31d","2c95e83759487d78070b56e40843c543","2e7c90c45b3cd8db15cd22e0caacfd40","31515f871cb12d538d53e730e5ddd406","3227c8a45ce4ccf8c475a51b331720c1","46a0071b7e5ea442580a2f80d2fcef42","47c68680c9a00b117764114668357e23","47cf9fda04b2abef75f1eca9804aaebe","496f2a2f14bda410b5f3dcff40bf56c3","4f52ca22d2d28e1ecdb9fba92e4cdde3","4fb7503dd8b21396bf9643e0dce70fcf","4ffd8ae803d7498e2d5a7a7a3a1268f8","5038e5cd4888adb3661d9958f04a1ec1","505724eac0faf0eb32e4ad25ab5cddfe","565a87ba8e79f5e081ea937068082afd","57511cb12fb5f505b3330dfec18f3432","65cbaec27b51d54dc0bceeef298719a8","66ac99b3501846a6c18f2671dbf31873","6b14a4d6212087fe8d88ad012dbc8598","6c7846d955bb5f3842bb7c35fae1569a","72ca000f40335d771936d077d4cabefb","75931e00c81274b1c279d23dfdb0bbad","775c0666a7a482ce664c72ed9195f120","7a4927e1a2aad1bc8ccef956130df0c0","7b8d0b4e718bc543de4a049e23672d79","8690ccd36c9d63b63e8d0278f0449e3b","889e8b93ec0c16ffac62ced220ed8e30","8f4392f839152c9614699048ee4fea11","953d5a3d8e00bbd2dba08579d95c61dc","98bf46542e3e9daa280ef0b395a7dabd","9a57a80692012878fcb463f41ce6dcfa","9d50143836d41726b6564a524453b868","9d9da1992f63776e135c1c1215ee1741","a5fd946bc7e8b12cdfd207790216b4b1","aa3f386f10864f46a09610d0e03a26b5","aeee6b71690a1df75792fcd3d11b8ede","b895d34958be7565888c15a51e0c73c7","b95ba7fb130f95ccae13c54312a69d36","be82532aa428dc5f30107ccfa08da8c6","c43c50baa3271b375298847bf6a7fc13","c4ee082a4ce704dcb3145e2cfd47ef6f","c8ed3353ae9c8b84ea7a9e81d2828193","ca09b19b6975e090fb4eda6ced1847b1","d43e6ae895039108cf68a36140190b0f","daa6ce148e2b8e5fd694183338db6ec9","e166ee1de912bf17453d2da1dc06fc6d","f4a8605fa09e447108eb714eccad57d0","fae63014d33efe844a25f2606de900b6")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("020ea21556b56229bb9714e721d893df","0789e52f16f5fc4ac2dbebadf53d44ec","18889d70d5546b861c6fa4ec11126942","1ccd2ce1e827b598207cc65e16686b7b","1eed3153b1afae1676ebd0db99ac5802","1f4f537e550e4299a945a97c1f8a0441","28165bb98959e7e7d9be67f0d248b31d","2c95e83759487d78070b56e40843c543","2e7c90c45b3cd8db15cd22e0caacfd40","31515f871cb12d538d53e730e5ddd406","3227c8a45ce4ccf8c475a51b331720c1","46a0071b7e5ea442580a2f80d2fcef42","47c68680c9a00b117764114668357e23","47cf9fda04b2abef75f1eca9804aaebe","496f2a2f14bda410b5f3dcff40bf56c3","4f52ca22d2d28e1ecdb9fba92e4cdde3","4fb7503dd8b21396bf9643e0dce70fcf","4ffd8ae803d7498e2d5a7a7a3a1268f8","5038e5cd4888adb3661d9958f04a1ec1","505724eac0faf0eb32e4ad25ab5cddfe","565a87ba8e79f5e081ea937068082afd","57511cb12fb5f505b3330dfec18f3432","65cbaec27b51d54dc0bceeef298719a8","66ac99b3501846a6c18f2671dbf31873","6b14a4d6212087fe8d88ad012dbc8598","6c7846d955bb5f3842bb7c35fae1569a","72ca000f40335d771936d077d4cabefb","75931e00c81274b1c279d23dfdb0bbad","775c0666a7a482ce664c72ed9195f120","7a4927e1a2aad1bc8ccef956130df0c0","7b8d0b4e718bc543de4a049e23672d79","8690ccd36c9d63b63e8d0278f0449e3b","889e8b93ec0c16ffac62ced220ed8e30","8f4392f839152c9614699048ee4fea11","953d5a3d8e00bbd2dba08579d95c61dc","98bf46542e3e9daa280ef0b395a7dabd","9a57a80692012878fcb463f41ce6dcfa","9d50143836d41726b6564a524453b868","9d9da1992f63776e135c1c1215ee1741","a5fd946bc7e8b12cdfd207790216b4b1","aa3f386f10864f46a09610d0e03a26b5","aeee6b71690a1df75792fcd3d11b8ede","b895d34958be7565888c15a51e0c73c7","b95ba7fb130f95ccae13c54312a69d36","be82532aa428dc5f30107ccfa08da8c6","c43c50baa3271b375298847bf6a7fc13","c4ee082a4ce704dcb3145e2cfd47ef6f","c8ed3353ae9c8b84ea7a9e81d2828193","ca09b19b6975e090fb4eda6ced1847b1","d43e6ae895039108cf68a36140190b0f","daa6ce148e2b8e5fd694183338db6ec9","e166ee1de912bf17453d2da1dc06fc6d","f4a8605fa09e447108eb714eccad57d0","fae63014d33efe844a25f2606de900b6")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("020ea21556b56229bb9714e721d893df","0789e52f16f5fc4ac2dbebadf53d44ec","18889d70d5546b861c6fa4ec11126942","1ccd2ce1e827b598207cc65e16686b7b","1eed3153b1afae1676ebd0db99ac5802","1f4f537e550e4299a945a97c1f8a0441","28165bb98959e7e7d9be67f0d248b31d","2c95e83759487d78070b56e40843c543","2e7c90c45b3cd8db15cd22e0caacfd40","31515f871cb12d538d53e730e5ddd406","3227c8a45ce4ccf8c475a51b331720c1","46a0071b7e5ea442580a2f80d2fcef42","47c68680c9a00b117764114668357e23","47cf9fda04b2abef75f1eca9804aaebe","496f2a2f14bda410b5f3dcff40bf56c3","4f52ca22d2d28e1ecdb9fba92e4cdde3","4fb7503dd8b21396bf9643e0dce70fcf","4ffd8ae803d7498e2d5a7a7a3a1268f8","5038e5cd4888adb3661d9958f04a1ec1","505724eac0faf0eb32e4ad25ab5cddfe","565a87ba8e79f5e081ea937068082afd","57511cb12fb5f505b3330dfec18f3432","65cbaec27b51d54dc0bceeef298719a8","66ac99b3501846a6c18f2671dbf31873","6b14a4d6212087fe8d88ad012dbc8598","6c7846d955bb5f3842bb7c35fae1569a","72ca000f40335d771936d077d4cabefb","75931e00c81274b1c279d23dfdb0bbad","775c0666a7a482ce664c72ed9195f120","7a4927e1a2aad1bc8ccef956130df0c0","7b8d0b4e718bc543de4a049e23672d79","8690ccd36c9d63b63e8d0278f0449e3b","889e8b93ec0c16ffac62ced220ed8e30","8f4392f839152c9614699048ee4fea11","953d5a3d8e00bbd2dba08579d95c61dc","98bf46542e3e9daa280ef0b395a7dabd","9a57a80692012878fcb463f41ce6dcfa","9d50143836d41726b6564a524453b868","9d9da1992f63776e135c1c1215ee1741","a5fd946bc7e8b12cdfd207790216b4b1","aa3f386f10864f46a09610d0e03a26b5","aeee6b71690a1df75792fcd3d11b8ede","b895d34958be7565888c15a51e0c73c7","b95ba7fb130f95ccae13c54312a69d36","be82532aa428dc5f30107ccfa08da8c6","c43c50baa3271b375298847bf6a7fc13","c4ee082a4ce704dcb3145e2cfd47ef6f","c8ed3353ae9c8b84ea7a9e81d2828193","ca09b19b6975e090fb4eda6ced1847b1","d43e6ae895039108cf68a36140190b0f","daa6ce148e2b8e5fd694183338db6ec9","e166ee1de912bf17453d2da1dc06fc6d","f4a8605fa09e447108eb714eccad57d0","fae63014d33efe844a25f2606de900b6")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("020ea21556b56229bb9714e721d893df","0789e52f16f5fc4ac2dbebadf53d44ec","18889d70d5546b861c6fa4ec11126942","1ccd2ce1e827b598207cc65e16686b7b","1eed3153b1afae1676ebd0db99ac5802","1f4f537e550e4299a945a97c1f8a0441","28165bb98959e7e7d9be67f0d248b31d","2c95e83759487d78070b56e40843c543","2e7c90c45b3cd8db15cd22e0caacfd40","31515f871cb12d538d53e730e5ddd406","3227c8a45ce4ccf8c475a51b331720c1","46a0071b7e5ea442580a2f80d2fcef42","47c68680c9a00b117764114668357e23","47cf9fda04b2abef75f1eca9804aaebe","496f2a2f14bda410b5f3dcff40bf56c3","4f52ca22d2d28e1ecdb9fba92e4cdde3","4fb7503dd8b21396bf9643e0dce70fcf","4ffd8ae803d7498e2d5a7a7a3a1268f8","5038e5cd4888adb3661d9958f04a1ec1","505724eac0faf0eb32e4ad25ab5cddfe","565a87ba8e79f5e081ea937068082afd","57511cb12fb5f505b3330dfec18f3432","65cbaec27b51d54dc0bceeef298719a8","66ac99b3501846a6c18f2671dbf31873","6b14a4d6212087fe8d88ad012dbc8598","6c7846d955bb5f3842bb7c35fae1569a","72ca000f40335d771936d077d4cabefb","75931e00c81274b1c279d23dfdb0bbad","775c0666a7a482ce664c72ed9195f120","7a4927e1a2aad1bc8ccef956130df0c0","7b8d0b4e718bc543de4a049e23672d79","8690ccd36c9d63b63e8d0278f0449e3b","889e8b93ec0c16ffac62ced220ed8e30","8f4392f839152c9614699048ee4fea11","953d5a3d8e00bbd2dba08579d95c61dc","98bf46542e3e9daa280ef0b395a7dabd","9a57a80692012878fcb463f41ce6dcfa","9d50143836d41726b6564a524453b868","9d9da1992f63776e135c1c1215ee1741","a5fd946bc7e8b12cdfd207790216b4b1","aa3f386f10864f46a09610d0e03a26b5","aeee6b71690a1df75792fcd3d11b8ede","b895d34958be7565888c15a51e0c73c7","b95ba7fb130f95ccae13c54312a69d36","be82532aa428dc5f30107ccfa08da8c6","c43c50baa3271b375298847bf6a7fc13","c4ee082a4ce704dcb3145e2cfd47ef6f","c8ed3353ae9c8b84ea7a9e81d2828193","ca09b19b6975e090fb4eda6ced1847b1","d43e6ae895039108cf68a36140190b0f","daa6ce148e2b8e5fd694183338db6ec9","e166ee1de912bf17453d2da1dc06fc6d","f4a8605fa09e447108eb714eccad57d0","fae63014d33efe844a25f2606de900b6")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("020ea21556b56229bb9714e721d893df","0789e52f16f5fc4ac2dbebadf53d44ec","18889d70d5546b861c6fa4ec11126942","1ccd2ce1e827b598207cc65e16686b7b","1eed3153b1afae1676ebd0db99ac5802","1f4f537e550e4299a945a97c1f8a0441","28165bb98959e7e7d9be67f0d248b31d","2c95e83759487d78070b56e40843c543","2e7c90c45b3cd8db15cd22e0caacfd40","31515f871cb12d538d53e730e5ddd406","3227c8a45ce4ccf8c475a51b331720c1","46a0071b7e5ea442580a2f80d2fcef42","47c68680c9a00b117764114668357e23","47cf9fda04b2abef75f1eca9804aaebe","496f2a2f14bda410b5f3dcff40bf56c3","4f52ca22d2d28e1ecdb9fba92e4cdde3","4fb7503dd8b21396bf9643e0dce70fcf","4ffd8ae803d7498e2d5a7a7a3a1268f8","5038e5cd4888adb3661d9958f04a1ec1","505724eac0faf0eb32e4ad25ab5cddfe","565a87ba8e79f5e081ea937068082afd","57511cb12fb5f505b3330dfec18f3432","65cbaec27b51d54dc0bceeef298719a8","66ac99b3501846a6c18f2671dbf31873","6b14a4d6212087fe8d88ad012dbc8598","6c7846d955bb5f3842bb7c35fae1569a","72ca000f40335d771936d077d4cabefb","75931e00c81274b1c279d23dfdb0bbad","775c0666a7a482ce664c72ed9195f120","7a4927e1a2aad1bc8ccef956130df0c0","7b8d0b4e718bc543de4a049e23672d79","8690ccd36c9d63b63e8d0278f0449e3b","889e8b93ec0c16ffac62ced220ed8e30","8f4392f839152c9614699048ee4fea11","953d5a3d8e00bbd2dba08579d95c61dc","98bf46542e3e9daa280ef0b395a7dabd","9a57a80692012878fcb463f41ce6dcfa","9d50143836d41726b6564a524453b868","9d9da1992f63776e135c1c1215ee1741","a5fd946bc7e8b12cdfd207790216b4b1","aa3f386f10864f46a09610d0e03a26b5","aeee6b71690a1df75792fcd3d11b8ede","b895d34958be7565888c15a51e0c73c7","b95ba7fb130f95ccae13c54312a69d36","be82532aa428dc5f30107ccfa08da8c6","c43c50baa3271b375298847bf6a7fc13","c4ee082a4ce704dcb3145e2cfd47ef6f","c8ed3353ae9c8b84ea7a9e81d2828193","ca09b19b6975e090fb4eda6ced1847b1","d43e6ae895039108cf68a36140190b0f","daa6ce148e2b8e5fd694183338db6ec9","e166ee1de912bf17453d2da1dc06fc6d","f4a8605fa09e447108eb714eccad57d0","fae63014d33efe844a25f2606de900b6")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("020ea21556b56229bb9714e721d893df","0789e52f16f5fc4ac2dbebadf53d44ec","18889d70d5546b861c6fa4ec11126942","1ccd2ce1e827b598207cc65e16686b7b","1eed3153b1afae1676ebd0db99ac5802","1f4f537e550e4299a945a97c1f8a0441","28165bb98959e7e7d9be67f0d248b31d","2c95e83759487d78070b56e40843c543","2e7c90c45b3cd8db15cd22e0caacfd40","31515f871cb12d538d53e730e5ddd406","3227c8a45ce4ccf8c475a51b331720c1","46a0071b7e5ea442580a2f80d2fcef42","47c68680c9a00b117764114668357e23","47cf9fda04b2abef75f1eca9804aaebe","496f2a2f14bda410b5f3dcff40bf56c3","4f52ca22d2d28e1ecdb9fba92e4cdde3","4fb7503dd8b21396bf9643e0dce70fcf","4ffd8ae803d7498e2d5a7a7a3a1268f8","5038e5cd4888adb3661d9958f04a1ec1","505724eac0faf0eb32e4ad25ab5cddfe","565a87ba8e79f5e081ea937068082afd","57511cb12fb5f505b3330dfec18f3432","65cbaec27b51d54dc0bceeef298719a8","66ac99b3501846a6c18f2671dbf31873","6b14a4d6212087fe8d88ad012dbc8598","6c7846d955bb5f3842bb7c35fae1569a","72ca000f40335d771936d077d4cabefb","75931e00c81274b1c279d23dfdb0bbad","775c0666a7a482ce664c72ed9195f120","7a4927e1a2aad1bc8ccef956130df0c0","7b8d0b4e718bc543de4a049e23672d79","8690ccd36c9d63b63e8d0278f0449e3b","889e8b93ec0c16ffac62ced220ed8e30","8f4392f839152c9614699048ee4fea11","953d5a3d8e00bbd2dba08579d95c61dc","98bf46542e3e9daa280ef0b395a7dabd","9a57a80692012878fcb463f41ce6dcfa","9d50143836d41726b6564a524453b868","9d9da1992f63776e135c1c1215ee1741","a5fd946bc7e8b12cdfd207790216b4b1","aa3f386f10864f46a09610d0e03a26b5","aeee6b71690a1df75792fcd3d11b8ede","b895d34958be7565888c15a51e0c73c7","b95ba7fb130f95ccae13c54312a69d36","be82532aa428dc5f30107ccfa08da8c6","c43c50baa3271b375298847bf6a7fc13","c4ee082a4ce704dcb3145e2cfd47ef6f","c8ed3353ae9c8b84ea7a9e81d2828193","ca09b19b6975e090fb4eda6ced1847b1","d43e6ae895039108cf68a36140190b0f","daa6ce148e2b8e5fd694183338db6ec9","e166ee1de912bf17453d2da1dc06fc6d","f4a8605fa09e447108eb714eccad57d0","fae63014d33efe844a25f2606de900b6")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("020ea21556b56229bb9714e721d893df","0789e52f16f5fc4ac2dbebadf53d44ec","18889d70d5546b861c6fa4ec11126942","1ccd2ce1e827b598207cc65e16686b7b","1eed3153b1afae1676ebd0db99ac5802","1f4f537e550e4299a945a97c1f8a0441","28165bb98959e7e7d9be67f0d248b31d","2c95e83759487d78070b56e40843c543","2e7c90c45b3cd8db15cd22e0caacfd40","31515f871cb12d538d53e730e5ddd406","3227c8a45ce4ccf8c475a51b331720c1","46a0071b7e5ea442580a2f80d2fcef42","47c68680c9a00b117764114668357e23","47cf9fda04b2abef75f1eca9804aaebe","496f2a2f14bda410b5f3dcff40bf56c3","4f52ca22d2d28e1ecdb9fba92e4cdde3","4fb7503dd8b21396bf9643e0dce70fcf","4ffd8ae803d7498e2d5a7a7a3a1268f8","5038e5cd4888adb3661d9958f04a1ec1","505724eac0faf0eb32e4ad25ab5cddfe","565a87ba8e79f5e081ea937068082afd","57511cb12fb5f505b3330dfec18f3432","65cbaec27b51d54dc0bceeef298719a8","66ac99b3501846a6c18f2671dbf31873","6b14a4d6212087fe8d88ad012dbc8598","6c7846d955bb5f3842bb7c35fae1569a","72ca000f40335d771936d077d4cabefb","75931e00c81274b1c279d23dfdb0bbad","775c0666a7a482ce664c72ed9195f120","7a4927e1a2aad1bc8ccef956130df0c0","7b8d0b4e718bc543de4a049e23672d79","8690ccd36c9d63b63e8d0278f0449e3b","889e8b93ec0c16ffac62ced220ed8e30","8f4392f839152c9614699048ee4fea11","953d5a3d8e00bbd2dba08579d95c61dc","98bf46542e3e9daa280ef0b395a7dabd","9a57a80692012878fcb463f41ce6dcfa","9d50143836d41726b6564a524453b868","9d9da1992f63776e135c1c1215ee1741","a5fd946bc7e8b12cdfd207790216b4b1","aa3f386f10864f46a09610d0e03a26b5","aeee6b71690a1df75792fcd3d11b8ede","b895d34958be7565888c15a51e0c73c7","b95ba7fb130f95ccae13c54312a69d36","be82532aa428dc5f30107ccfa08da8c6","c43c50baa3271b375298847bf6a7fc13","c4ee082a4ce704dcb3145e2cfd47ef6f","c8ed3353ae9c8b84ea7a9e81d2828193","ca09b19b6975e090fb4eda6ced1847b1","d43e6ae895039108cf68a36140190b0f","daa6ce148e2b8e5fd694183338db6ec9","e166ee1de912bf17453d2da1dc06fc6d","f4a8605fa09e447108eb714eccad57d0","fae63014d33efe844a25f2606de900b6")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("020ea21556b56229bb9714e721d893df","0789e52f16f5fc4ac2dbebadf53d44ec","18889d70d5546b861c6fa4ec11126942","1ccd2ce1e827b598207cc65e16686b7b","1eed3153b1afae1676ebd0db99ac5802","1f4f537e550e4299a945a97c1f8a0441","28165bb98959e7e7d9be67f0d248b31d","2c95e83759487d78070b56e40843c543","2e7c90c45b3cd8db15cd22e0caacfd40","31515f871cb12d538d53e730e5ddd406","3227c8a45ce4ccf8c475a51b331720c1","46a0071b7e5ea442580a2f80d2fcef42","47c68680c9a00b117764114668357e23","47cf9fda04b2abef75f1eca9804aaebe","496f2a2f14bda410b5f3dcff40bf56c3","4f52ca22d2d28e1ecdb9fba92e4cdde3","4fb7503dd8b21396bf9643e0dce70fcf","4ffd8ae803d7498e2d5a7a7a3a1268f8","5038e5cd4888adb3661d9958f04a1ec1","505724eac0faf0eb32e4ad25ab5cddfe","565a87ba8e79f5e081ea937068082afd","57511cb12fb5f505b3330dfec18f3432","65cbaec27b51d54dc0bceeef298719a8","66ac99b3501846a6c18f2671dbf31873","6b14a4d6212087fe8d88ad012dbc8598","6c7846d955bb5f3842bb7c35fae1569a","72ca000f40335d771936d077d4cabefb","75931e00c81274b1c279d23dfdb0bbad","775c0666a7a482ce664c72ed9195f120","7a4927e1a2aad1bc8ccef956130df0c0","7b8d0b4e718bc543de4a049e23672d79","8690ccd36c9d63b63e8d0278f0449e3b","889e8b93ec0c16ffac62ced220ed8e30","8f4392f839152c9614699048ee4fea11","953d5a3d8e00bbd2dba08579d95c61dc","98bf46542e3e9daa280ef0b395a7dabd","9a57a80692012878fcb463f41ce6dcfa","9d50143836d41726b6564a524453b868","9d9da1992f63776e135c1c1215ee1741","a5fd946bc7e8b12cdfd207790216b4b1","aa3f386f10864f46a09610d0e03a26b5","aeee6b71690a1df75792fcd3d11b8ede","b895d34958be7565888c15a51e0c73c7","b95ba7fb130f95ccae13c54312a69d36","be82532aa428dc5f30107ccfa08da8c6","c43c50baa3271b375298847bf6a7fc13","c4ee082a4ce704dcb3145e2cfd47ef6f","c8ed3353ae9c8b84ea7a9e81d2828193","ca09b19b6975e090fb4eda6ced1847b1","d43e6ae895039108cf68a36140190b0f","daa6ce148e2b8e5fd694183338db6ec9","e166ee1de912bf17453d2da1dc06fc6d","f4a8605fa09e447108eb714eccad57d0","fae63014d33efe844a25f2606de900b6")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("020ea21556b56229bb9714e721d893df","0789e52f16f5fc4ac2dbebadf53d44ec","18889d70d5546b861c6fa4ec11126942","1ccd2ce1e827b598207cc65e16686b7b","1eed3153b1afae1676ebd0db99ac5802","1f4f537e550e4299a945a97c1f8a0441","28165bb98959e7e7d9be67f0d248b31d","2c95e83759487d78070b56e40843c543","2e7c90c45b3cd8db15cd22e0caacfd40","31515f871cb12d538d53e730e5ddd406","3227c8a45ce4ccf8c475a51b331720c1","46a0071b7e5ea442580a2f80d2fcef42","47c68680c9a00b117764114668357e23","47cf9fda04b2abef75f1eca9804aaebe","496f2a2f14bda410b5f3dcff40bf56c3","4f52ca22d2d28e1ecdb9fba92e4cdde3","4fb7503dd8b21396bf9643e0dce70fcf","4ffd8ae803d7498e2d5a7a7a3a1268f8","5038e5cd4888adb3661d9958f04a1ec1","505724eac0faf0eb32e4ad25ab5cddfe","565a87ba8e79f5e081ea937068082afd","57511cb12fb5f505b3330dfec18f3432","65cbaec27b51d54dc0bceeef298719a8","66ac99b3501846a6c18f2671dbf31873","6b14a4d6212087fe8d88ad012dbc8598","6c7846d955bb5f3842bb7c35fae1569a","72ca000f40335d771936d077d4cabefb","75931e00c81274b1c279d23dfdb0bbad","775c0666a7a482ce664c72ed9195f120","7a4927e1a2aad1bc8ccef956130df0c0","7b8d0b4e718bc543de4a049e23672d79","8690ccd36c9d63b63e8d0278f0449e3b","889e8b93ec0c16ffac62ced220ed8e30","8f4392f839152c9614699048ee4fea11","953d5a3d8e00bbd2dba08579d95c61dc","98bf46542e3e9daa280ef0b395a7dabd","9a57a80692012878fcb463f41ce6dcfa","9d50143836d41726b6564a524453b868","9d9da1992f63776e135c1c1215ee1741","a5fd946bc7e8b12cdfd207790216b4b1","aa3f386f10864f46a09610d0e03a26b5","aeee6b71690a1df75792fcd3d11b8ede","b895d34958be7565888c15a51e0c73c7","b95ba7fb130f95ccae13c54312a69d36","be82532aa428dc5f30107ccfa08da8c6","c43c50baa3271b375298847bf6a7fc13","c4ee082a4ce704dcb3145e2cfd47ef6f","c8ed3353ae9c8b84ea7a9e81d2828193","ca09b19b6975e090fb4eda6ced1847b1","d43e6ae895039108cf68a36140190b0f","daa6ce148e2b8e5fd694183338db6ec9","e166ee1de912bf17453d2da1dc06fc6d","f4a8605fa09e447108eb714eccad57d0","fae63014d33efe844a25f2606de900b6")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("020ea21556b56229bb9714e721d893df","0789e52f16f5fc4ac2dbebadf53d44ec","18889d70d5546b861c6fa4ec11126942","1ccd2ce1e827b598207cc65e16686b7b","1eed3153b1afae1676ebd0db99ac5802","1f4f537e550e4299a945a97c1f8a0441","28165bb98959e7e7d9be67f0d248b31d","2c95e83759487d78070b56e40843c543","2e7c90c45b3cd8db15cd22e0caacfd40","31515f871cb12d538d53e730e5ddd406","3227c8a45ce4ccf8c475a51b331720c1","46a0071b7e5ea442580a2f80d2fcef42","47c68680c9a00b117764114668357e23","47cf9fda04b2abef75f1eca9804aaebe","496f2a2f14bda410b5f3dcff40bf56c3","4f52ca22d2d28e1ecdb9fba92e4cdde3","4fb7503dd8b21396bf9643e0dce70fcf","4ffd8ae803d7498e2d5a7a7a3a1268f8","5038e5cd4888adb3661d9958f04a1ec1","505724eac0faf0eb32e4ad25ab5cddfe","565a87ba8e79f5e081ea937068082afd","57511cb12fb5f505b3330dfec18f3432","65cbaec27b51d54dc0bceeef298719a8","66ac99b3501846a6c18f2671dbf31873","6b14a4d6212087fe8d88ad012dbc8598","6c7846d955bb5f3842bb7c35fae1569a","72ca000f40335d771936d077d4cabefb","75931e00c81274b1c279d23dfdb0bbad","775c0666a7a482ce664c72ed9195f120","7a4927e1a2aad1bc8ccef956130df0c0","7b8d0b4e718bc543de4a049e23672d79","8690ccd36c9d63b63e8d0278f0449e3b","889e8b93ec0c16ffac62ced220ed8e30","8f4392f839152c9614699048ee4fea11","953d5a3d8e00bbd2dba08579d95c61dc","98bf46542e3e9daa280ef0b395a7dabd","9a57a80692012878fcb463f41ce6dcfa","9d50143836d41726b6564a524453b868","9d9da1992f63776e135c1c1215ee1741","a5fd946bc7e8b12cdfd207790216b4b1","aa3f386f10864f46a09610d0e03a26b5","aeee6b71690a1df75792fcd3d11b8ede","b895d34958be7565888c15a51e0c73c7","b95ba7fb130f95ccae13c54312a69d36","be82532aa428dc5f30107ccfa08da8c6","c43c50baa3271b375298847bf6a7fc13","c4ee082a4ce704dcb3145e2cfd47ef6f","c8ed3353ae9c8b84ea7a9e81d2828193","ca09b19b6975e090fb4eda6ced1847b1","d43e6ae895039108cf68a36140190b0f","daa6ce148e2b8e5fd694183338db6ec9","e166ee1de912bf17453d2da1dc06fc6d","f4a8605fa09e447108eb714eccad57d0","fae63014d33efe844a25f2606de900b6")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("020ea21556b56229bb9714e721d893df","0789e52f16f5fc4ac2dbebadf53d44ec","18889d70d5546b861c6fa4ec11126942","1ccd2ce1e827b598207cc65e16686b7b","1eed3153b1afae1676ebd0db99ac5802","1f4f537e550e4299a945a97c1f8a0441","28165bb98959e7e7d9be67f0d248b31d","2c95e83759487d78070b56e40843c543","2e7c90c45b3cd8db15cd22e0caacfd40","31515f871cb12d538d53e730e5ddd406","3227c8a45ce4ccf8c475a51b331720c1","46a0071b7e5ea442580a2f80d2fcef42","47c68680c9a00b117764114668357e23","47cf9fda04b2abef75f1eca9804aaebe","496f2a2f14bda410b5f3dcff40bf56c3","4f52ca22d2d28e1ecdb9fba92e4cdde3","4fb7503dd8b21396bf9643e0dce70fcf","4ffd8ae803d7498e2d5a7a7a3a1268f8","5038e5cd4888adb3661d9958f04a1ec1","505724eac0faf0eb32e4ad25ab5cddfe","565a87ba8e79f5e081ea937068082afd","57511cb12fb5f505b3330dfec18f3432","65cbaec27b51d54dc0bceeef298719a8","66ac99b3501846a6c18f2671dbf31873","6b14a4d6212087fe8d88ad012dbc8598","6c7846d955bb5f3842bb7c35fae1569a","72ca000f40335d771936d077d4cabefb","75931e00c81274b1c279d23dfdb0bbad","775c0666a7a482ce664c72ed9195f120","7a4927e1a2aad1bc8ccef956130df0c0","7b8d0b4e718bc543de4a049e23672d79","8690ccd36c9d63b63e8d0278f0449e3b","889e8b93ec0c16ffac62ced220ed8e30","8f4392f839152c9614699048ee4fea11","953d5a3d8e00bbd2dba08579d95c61dc","98bf46542e3e9daa280ef0b395a7dabd","9a57a80692012878fcb463f41ce6dcfa","9d50143836d41726b6564a524453b868","9d9da1992f63776e135c1c1215ee1741","a5fd946bc7e8b12cdfd207790216b4b1","aa3f386f10864f46a09610d0e03a26b5","aeee6b71690a1df75792fcd3d11b8ede","b895d34958be7565888c15a51e0c73c7","b95ba7fb130f95ccae13c54312a69d36","be82532aa428dc5f30107ccfa08da8c6","c43c50baa3271b375298847bf6a7fc13","c4ee082a4ce704dcb3145e2cfd47ef6f","c8ed3353ae9c8b84ea7a9e81d2828193","ca09b19b6975e090fb4eda6ced1847b1","d43e6ae895039108cf68a36140190b0f","daa6ce148e2b8e5fd694183338db6ec9","e166ee1de912bf17453d2da1dc06fc6d","f4a8605fa09e447108eb714eccad57d0","fae63014d33efe844a25f2606de900b6")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "press.giize.com" OR destinationhostname CONTAINS "tf-bank.com" OR destinationhostname CONTAINS "i-development.one" OR destinationhostname CONTAINS "aeternam.me" OR destinationhostname CONTAINS "nedbank.za.com" OR destinationhostname CONTAINS "nedbankplc.4nmn.com" OR destinationhostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "press.giize.com" OR sourcentdomain CONTAINS "tf-bank.com" OR sourcentdomain CONTAINS "i-development.one" OR sourcentdomain CONTAINS "aeternam.me" OR sourcentdomain CONTAINS "nedbank.za.com" OR sourcentdomain CONTAINS "nedbankplc.4nmn.com" OR sourcentdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "press.giize.com" OR sourcehostname CONTAINS "tf-bank.com" OR sourcehostname CONTAINS "i-development.one" OR sourcehostname CONTAINS "aeternam.me" OR sourcehostname CONTAINS "nedbank.za.com" OR sourcehostname CONTAINS "nedbankplc.4nmn.com" OR sourcehostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "press.giize.com" OR destinationntdomain CONTAINS "tf-bank.com" OR destinationntdomain CONTAINS "i-development.one" OR destinationntdomain CONTAINS "aeternam.me" OR destinationntdomain CONTAINS "nedbank.za.com" OR destinationntdomain CONTAINS "nedbankplc.4nmn.com" OR destinationntdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "press.giize.com" OR destinationhostname CONTAINS "tf-bank.com" OR destinationhostname CONTAINS "i-development.one" OR destinationhostname CONTAINS "aeternam.me" OR destinationhostname CONTAINS "nedbank.za.com" OR destinationhostname CONTAINS "nedbankplc.4nmn.com" OR destinationhostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "press.giize.com" OR sourcentdomain CONTAINS "tf-bank.com" OR sourcentdomain CONTAINS "i-development.one" OR sourcentdomain CONTAINS "aeternam.me" OR sourcentdomain CONTAINS "nedbank.za.com" OR sourcentdomain CONTAINS "nedbankplc.4nmn.com" OR sourcentdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "press.giize.com" OR sourcehostname CONTAINS "tf-bank.com" OR sourcehostname CONTAINS "i-development.one" OR sourcehostname CONTAINS "aeternam.me" OR sourcehostname CONTAINS "nedbank.za.com" OR sourcehostname CONTAINS "nedbankplc.4nmn.com" OR sourcehostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "press.giize.com" OR destinationntdomain CONTAINS "tf-bank.com" OR destinationntdomain CONTAINS "i-development.one" OR destinationntdomain CONTAINS "aeternam.me" OR destinationntdomain CONTAINS "nedbank.za.com" OR destinationntdomain CONTAINS "nedbankplc.4nmn.com" OR destinationntdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "press.giize.com" OR destinationhostname CONTAINS "tf-bank.com" OR destinationhostname CONTAINS "i-development.one" OR destinationhostname CONTAINS "aeternam.me" OR destinationhostname CONTAINS "nedbank.za.com" OR destinationhostname CONTAINS "nedbankplc.4nmn.com" OR destinationhostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "press.giize.com" OR sourcentdomain CONTAINS "tf-bank.com" OR sourcentdomain CONTAINS "i-development.one" OR sourcentdomain CONTAINS "aeternam.me" OR sourcentdomain CONTAINS "nedbank.za.com" OR sourcentdomain CONTAINS "nedbankplc.4nmn.com" OR sourcentdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "press.giize.com" OR sourcehostname CONTAINS "tf-bank.com" OR sourcehostname CONTAINS "i-development.one" OR sourcehostname CONTAINS "aeternam.me" OR sourcehostname CONTAINS "nedbank.za.com" OR sourcehostname CONTAINS "nedbankplc.4nmn.com" OR sourcehostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "press.giize.com" OR destinationntdomain CONTAINS "tf-bank.com" OR destinationntdomain CONTAINS "i-development.one" OR destinationntdomain CONTAINS "aeternam.me" OR destinationntdomain CONTAINS "nedbank.za.com" OR destinationntdomain CONTAINS "nedbankplc.4nmn.com" OR destinationntdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "press.giize.com" OR destinationhostname CONTAINS "tf-bank.com" OR destinationhostname CONTAINS "i-development.one" OR destinationhostname CONTAINS "aeternam.me" OR destinationhostname CONTAINS "nedbank.za.com" OR destinationhostname CONTAINS "nedbankplc.4nmn.com" OR destinationhostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "press.giize.com" OR sourcentdomain CONTAINS "tf-bank.com" OR sourcentdomain CONTAINS "i-development.one" OR sourcentdomain CONTAINS "aeternam.me" OR sourcentdomain CONTAINS "nedbank.za.com" OR sourcentdomain CONTAINS "nedbankplc.4nmn.com" OR sourcentdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "press.giize.com" OR sourcehostname CONTAINS "tf-bank.com" OR sourcehostname CONTAINS "i-development.one" OR sourcehostname CONTAINS "aeternam.me" OR sourcehostname CONTAINS "nedbank.za.com" OR sourcehostname CONTAINS "nedbankplc.4nmn.com" OR sourcehostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "press.giize.com" OR destinationntdomain CONTAINS "tf-bank.com" OR destinationntdomain CONTAINS "i-development.one" OR destinationntdomain CONTAINS "aeternam.me" OR destinationntdomain CONTAINS "nedbank.za.com" OR destinationntdomain CONTAINS "nedbankplc.4nmn.com" OR destinationntdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "press.giize.com" OR destinationhostname CONTAINS "tf-bank.com" OR destinationhostname CONTAINS "i-development.one" OR destinationhostname CONTAINS "aeternam.me" OR destinationhostname CONTAINS "nedbank.za.com" OR destinationhostname CONTAINS "nedbankplc.4nmn.com" OR destinationhostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "press.giize.com" OR sourcentdomain CONTAINS "tf-bank.com" OR sourcentdomain CONTAINS "i-development.one" OR sourcentdomain CONTAINS "aeternam.me" OR sourcentdomain CONTAINS "nedbank.za.com" OR sourcentdomain CONTAINS "nedbankplc.4nmn.com" OR sourcentdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "press.giize.com" OR sourcehostname CONTAINS "tf-bank.com" OR sourcehostname CONTAINS "i-development.one" OR sourcehostname CONTAINS "aeternam.me" OR sourcehostname CONTAINS "nedbank.za.com" OR sourcehostname CONTAINS "nedbankplc.4nmn.com" OR sourcehostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "press.giize.com" OR destinationntdomain CONTAINS "tf-bank.com" OR destinationntdomain CONTAINS "i-development.one" OR destinationntdomain CONTAINS "aeternam.me" OR destinationntdomain CONTAINS "nedbank.za.com" OR destinationntdomain CONTAINS "nedbankplc.4nmn.com" OR destinationntdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "press.giize.com" OR destinationhostname CONTAINS "tf-bank.com" OR destinationhostname CONTAINS "i-development.one" OR destinationhostname CONTAINS "aeternam.me" OR destinationhostname CONTAINS "nedbank.za.com" OR destinationhostname CONTAINS "nedbankplc.4nmn.com" OR destinationhostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "press.giize.com" OR sourcentdomain CONTAINS "tf-bank.com" OR sourcentdomain CONTAINS "i-development.one" OR sourcentdomain CONTAINS "aeternam.me" OR sourcentdomain CONTAINS "nedbank.za.com" OR sourcentdomain CONTAINS "nedbankplc.4nmn.com" OR sourcentdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "press.giize.com" OR sourcehostname CONTAINS "tf-bank.com" OR sourcehostname CONTAINS "i-development.one" OR sourcehostname CONTAINS "aeternam.me" OR sourcehostname CONTAINS "nedbank.za.com" OR sourcehostname CONTAINS "nedbankplc.4nmn.com" OR sourcehostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "press.giize.com" OR destinationntdomain CONTAINS "tf-bank.com" OR destinationntdomain CONTAINS "i-development.one" OR destinationntdomain CONTAINS "aeternam.me" OR destinationntdomain CONTAINS "nedbank.za.com" OR destinationntdomain CONTAINS "nedbankplc.4nmn.com" OR destinationntdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "press.giize.com" OR destinationhostname CONTAINS "tf-bank.com" OR destinationhostname CONTAINS "i-development.one" OR destinationhostname CONTAINS "aeternam.me" OR destinationhostname CONTAINS "nedbank.za.com" OR destinationhostname CONTAINS "nedbankplc.4nmn.com" OR destinationhostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "press.giize.com" OR sourcentdomain CONTAINS "tf-bank.com" OR sourcentdomain CONTAINS "i-development.one" OR sourcentdomain CONTAINS "aeternam.me" OR sourcentdomain CONTAINS "nedbank.za.com" OR sourcentdomain CONTAINS "nedbankplc.4nmn.com" OR sourcentdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "press.giize.com" OR sourcehostname CONTAINS "tf-bank.com" OR sourcehostname CONTAINS "i-development.one" OR sourcehostname CONTAINS "aeternam.me" OR sourcehostname CONTAINS "nedbank.za.com" OR sourcehostname CONTAINS "nedbankplc.4nmn.com" OR sourcehostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "press.giize.com" OR destinationntdomain CONTAINS "tf-bank.com" OR destinationntdomain CONTAINS "i-development.one" OR destinationntdomain CONTAINS "aeternam.me" OR destinationntdomain CONTAINS "nedbank.za.com" OR destinationntdomain CONTAINS "nedbankplc.4nmn.com" OR destinationntdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "press.giize.com" OR destinationhostname CONTAINS "tf-bank.com" OR destinationhostname CONTAINS "i-development.one" OR destinationhostname CONTAINS "aeternam.me" OR destinationhostname CONTAINS "nedbank.za.com" OR destinationhostname CONTAINS "nedbankplc.4nmn.com" OR destinationhostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "press.giize.com" OR sourcentdomain CONTAINS "tf-bank.com" OR sourcentdomain CONTAINS "i-development.one" OR sourcentdomain CONTAINS "aeternam.me" OR sourcentdomain CONTAINS "nedbank.za.com" OR sourcentdomain CONTAINS "nedbankplc.4nmn.com" OR sourcentdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "press.giize.com" OR sourcehostname CONTAINS "tf-bank.com" OR sourcehostname CONTAINS "i-development.one" OR sourcehostname CONTAINS "aeternam.me" OR sourcehostname CONTAINS "nedbank.za.com" OR sourcehostname CONTAINS "nedbankplc.4nmn.com" OR sourcehostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "press.giize.com" OR destinationntdomain CONTAINS "tf-bank.com" OR destinationntdomain CONTAINS "i-development.one" OR destinationntdomain CONTAINS "aeternam.me" OR destinationntdomain CONTAINS "nedbank.za.com" OR destinationntdomain CONTAINS "nedbankplc.4nmn.com" OR destinationntdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "press.giize.com" OR destinationhostname CONTAINS "tf-bank.com" OR destinationhostname CONTAINS "i-development.one" OR destinationhostname CONTAINS "aeternam.me" OR destinationhostname CONTAINS "nedbank.za.com" OR destinationhostname CONTAINS "nedbankplc.4nmn.com" OR destinationhostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "press.giize.com" OR sourcentdomain CONTAINS "tf-bank.com" OR sourcentdomain CONTAINS "i-development.one" OR sourcentdomain CONTAINS "aeternam.me" OR sourcentdomain CONTAINS "nedbank.za.com" OR sourcentdomain CONTAINS "nedbankplc.4nmn.com" OR sourcentdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "press.giize.com" OR sourcehostname CONTAINS "tf-bank.com" OR sourcehostname CONTAINS "i-development.one" OR sourcehostname CONTAINS "aeternam.me" OR sourcehostname CONTAINS "nedbank.za.com" OR sourcehostname CONTAINS "nedbankplc.4nmn.com" OR sourcehostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "press.giize.com" OR destinationntdomain CONTAINS "tf-bank.com" OR destinationntdomain CONTAINS "i-development.one" OR destinationntdomain CONTAINS "aeternam.me" OR destinationntdomain CONTAINS "nedbank.za.com" OR destinationntdomain CONTAINS "nedbankplc.4nmn.com" OR destinationntdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "press.giize.com" OR destinationhostname CONTAINS "tf-bank.com" OR destinationhostname CONTAINS "i-development.one" OR destinationhostname CONTAINS "aeternam.me" OR destinationhostname CONTAINS "nedbank.za.com" OR destinationhostname CONTAINS "nedbankplc.4nmn.com" OR destinationhostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "press.giize.com" OR sourcentdomain CONTAINS "tf-bank.com" OR sourcentdomain CONTAINS "i-development.one" OR sourcentdomain CONTAINS "aeternam.me" OR sourcentdomain CONTAINS "nedbank.za.com" OR sourcentdomain CONTAINS "nedbankplc.4nmn.com" OR sourcentdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "press.giize.com" OR sourcehostname CONTAINS "tf-bank.com" OR sourcehostname CONTAINS "i-development.one" OR sourcehostname CONTAINS "aeternam.me" OR sourcehostname CONTAINS "nedbank.za.com" OR sourcehostname CONTAINS "nedbankplc.4nmn.com" OR sourcehostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "press.giize.com" OR destinationntdomain CONTAINS "tf-bank.com" OR destinationntdomain CONTAINS "i-development.one" OR destinationntdomain CONTAINS "aeternam.me" OR destinationntdomain CONTAINS "nedbank.za.com" OR destinationntdomain CONTAINS "nedbankplc.4nmn.com" OR destinationntdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "press.giize.com" OR destinationhostname CONTAINS "tf-bank.com" OR destinationhostname CONTAINS "i-development.one" OR destinationhostname CONTAINS "aeternam.me" OR destinationhostname CONTAINS "nedbank.za.com" OR destinationhostname CONTAINS "nedbankplc.4nmn.com" OR destinationhostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "press.giize.com" OR sourcentdomain CONTAINS "tf-bank.com" OR sourcentdomain CONTAINS "i-development.one" OR sourcentdomain CONTAINS "aeternam.me" OR sourcentdomain CONTAINS "nedbank.za.com" OR sourcentdomain CONTAINS "nedbankplc.4nmn.com" OR sourcentdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "press.giize.com" OR sourcehostname CONTAINS "tf-bank.com" OR sourcehostname CONTAINS "i-development.one" OR sourcehostname CONTAINS "aeternam.me" OR sourcehostname CONTAINS "nedbank.za.com" OR sourcehostname CONTAINS "nedbankplc.4nmn.com" OR sourcehostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "press.giize.com" OR destinationntdomain CONTAINS "tf-bank.com" OR destinationntdomain CONTAINS "i-development.one" OR destinationntdomain CONTAINS "aeternam.me" OR destinationntdomain CONTAINS "nedbank.za.com" OR destinationntdomain CONTAINS "nedbankplc.4nmn.com" OR destinationntdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "press.giize.com" OR destinationhostname CONTAINS "tf-bank.com" OR destinationhostname CONTAINS "i-development.one" OR destinationhostname CONTAINS "aeternam.me" OR destinationhostname CONTAINS "nedbank.za.com" OR destinationhostname CONTAINS "nedbankplc.4nmn.com" OR destinationhostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "press.giize.com" OR sourcentdomain CONTAINS "tf-bank.com" OR sourcentdomain CONTAINS "i-development.one" OR sourcentdomain CONTAINS "aeternam.me" OR sourcentdomain CONTAINS "nedbank.za.com" OR sourcentdomain CONTAINS "nedbankplc.4nmn.com" OR sourcentdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "press.giize.com" OR sourcehostname CONTAINS "tf-bank.com" OR sourcehostname CONTAINS "i-development.one" OR sourcehostname CONTAINS "aeternam.me" OR sourcehostname CONTAINS "nedbank.za.com" OR sourcehostname CONTAINS "nedbankplc.4nmn.com" OR sourcehostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "press.giize.com" OR destinationntdomain CONTAINS "tf-bank.com" OR destinationntdomain CONTAINS "i-development.one" OR destinationntdomain CONTAINS "aeternam.me" OR destinationntdomain CONTAINS "nedbank.za.com" OR destinationntdomain CONTAINS "nedbankplc.4nmn.com" OR destinationntdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "press.giize.com" OR destinationhostname CONTAINS "tf-bank.com" OR destinationhostname CONTAINS "i-development.one" OR destinationhostname CONTAINS "aeternam.me" OR destinationhostname CONTAINS "nedbank.za.com" OR destinationhostname CONTAINS "nedbankplc.4nmn.com" OR destinationhostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "press.giize.com" OR sourcentdomain CONTAINS "tf-bank.com" OR sourcentdomain CONTAINS "i-development.one" OR sourcentdomain CONTAINS "aeternam.me" OR sourcentdomain CONTAINS "nedbank.za.com" OR sourcentdomain CONTAINS "nedbankplc.4nmn.com" OR sourcentdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "press.giize.com" OR sourcehostname CONTAINS "tf-bank.com" OR sourcehostname CONTAINS "i-development.one" OR sourcehostname CONTAINS "aeternam.me" OR sourcehostname CONTAINS "nedbank.za.com" OR sourcehostname CONTAINS "nedbankplc.4nmn.com" OR sourcehostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "press.giize.com" OR destinationntdomain CONTAINS "tf-bank.com" OR destinationntdomain CONTAINS "i-development.one" OR destinationntdomain CONTAINS "aeternam.me" OR destinationntdomain CONTAINS "nedbank.za.com" OR destinationntdomain CONTAINS "nedbankplc.4nmn.com" OR destinationntdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "press.giize.com" OR destinationhostname CONTAINS "tf-bank.com" OR destinationhostname CONTAINS "i-development.one" OR destinationhostname CONTAINS "aeternam.me" OR destinationhostname CONTAINS "nedbank.za.com" OR destinationhostname CONTAINS "nedbankplc.4nmn.com" OR destinationhostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "press.giize.com" OR sourcentdomain CONTAINS "tf-bank.com" OR sourcentdomain CONTAINS "i-development.one" OR sourcentdomain CONTAINS "aeternam.me" OR sourcentdomain CONTAINS "nedbank.za.com" OR sourcentdomain CONTAINS "nedbankplc.4nmn.com" OR sourcentdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "press.giize.com" OR sourcehostname CONTAINS "tf-bank.com" OR sourcehostname CONTAINS "i-development.one" OR sourcehostname CONTAINS "aeternam.me" OR sourcehostname CONTAINS "nedbank.za.com" OR sourcehostname CONTAINS "nedbankplc.4nmn.com" OR sourcehostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "press.giize.com" OR destinationntdomain CONTAINS "tf-bank.com" OR destinationntdomain CONTAINS "i-development.one" OR destinationntdomain CONTAINS "aeternam.me" OR destinationntdomain CONTAINS "nedbank.za.com" OR destinationntdomain CONTAINS "nedbankplc.4nmn.com" OR destinationntdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "press.giize.com" OR destinationhostname CONTAINS "tf-bank.com" OR destinationhostname CONTAINS "i-development.one" OR destinationhostname CONTAINS "aeternam.me" OR destinationhostname CONTAINS "nedbank.za.com" OR destinationhostname CONTAINS "nedbankplc.4nmn.com" OR destinationhostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "press.giize.com" OR sourcentdomain CONTAINS "tf-bank.com" OR sourcentdomain CONTAINS "i-development.one" OR sourcentdomain CONTAINS "aeternam.me" OR sourcentdomain CONTAINS "nedbank.za.com" OR sourcentdomain CONTAINS "nedbankplc.4nmn.com" OR sourcentdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "press.giize.com" OR sourcehostname CONTAINS "tf-bank.com" OR sourcehostname CONTAINS "i-development.one" OR sourcehostname CONTAINS "aeternam.me" OR sourcehostname CONTAINS "nedbank.za.com" OR sourcehostname CONTAINS "nedbankplc.4nmn.com" OR sourcehostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "press.giize.com" OR destinationntdomain CONTAINS "tf-bank.com" OR destinationntdomain CONTAINS "i-development.one" OR destinationntdomain CONTAINS "aeternam.me" OR destinationntdomain CONTAINS "nedbank.za.com" OR destinationntdomain CONTAINS "nedbankplc.4nmn.com" OR destinationntdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "press.giize.com" OR destinationhostname CONTAINS "tf-bank.com" OR destinationhostname CONTAINS "i-development.one" OR destinationhostname CONTAINS "aeternam.me" OR destinationhostname CONTAINS "nedbank.za.com" OR destinationhostname CONTAINS "nedbankplc.4nmn.com" OR destinationhostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "press.giize.com" OR sourcentdomain CONTAINS "tf-bank.com" OR sourcentdomain CONTAINS "i-development.one" OR sourcentdomain CONTAINS "aeternam.me" OR sourcentdomain CONTAINS "nedbank.za.com" OR sourcentdomain CONTAINS "nedbankplc.4nmn.com" OR sourcentdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "press.giize.com" OR sourcehostname CONTAINS "tf-bank.com" OR sourcehostname CONTAINS "i-development.one" OR sourcehostname CONTAINS "aeternam.me" OR sourcehostname CONTAINS "nedbank.za.com" OR sourcehostname CONTAINS "nedbankplc.4nmn.com" OR sourcehostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "press.giize.com" OR destinationntdomain CONTAINS "tf-bank.com" OR destinationntdomain CONTAINS "i-development.one" OR destinationntdomain CONTAINS "aeternam.me" OR destinationntdomain CONTAINS "nedbank.za.com" OR destinationntdomain CONTAINS "nedbankplc.4nmn.com" OR destinationntdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "press.giize.com" OR destinationhostname CONTAINS "tf-bank.com" OR destinationhostname CONTAINS "i-development.one" OR destinationhostname CONTAINS "aeternam.me" OR destinationhostname CONTAINS "nedbank.za.com" OR destinationhostname CONTAINS "nedbankplc.4nmn.com" OR destinationhostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "press.giize.com" OR sourcentdomain CONTAINS "tf-bank.com" OR sourcentdomain CONTAINS "i-development.one" OR sourcentdomain CONTAINS "aeternam.me" OR sourcentdomain CONTAINS "nedbank.za.com" OR sourcentdomain CONTAINS "nedbankplc.4nmn.com" OR sourcentdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "press.giize.com" OR sourcehostname CONTAINS "tf-bank.com" OR sourcehostname CONTAINS "i-development.one" OR sourcehostname CONTAINS "aeternam.me" OR sourcehostname CONTAINS "nedbank.za.com" OR sourcehostname CONTAINS "nedbankplc.4nmn.com" OR sourcehostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "press.giize.com" OR destinationntdomain CONTAINS "tf-bank.com" OR destinationntdomain CONTAINS "i-development.one" OR destinationntdomain CONTAINS "aeternam.me" OR destinationntdomain CONTAINS "nedbank.za.com" OR destinationntdomain CONTAINS "nedbankplc.4nmn.com" OR destinationntdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "press.giize.com" OR destinationhostname CONTAINS "tf-bank.com" OR destinationhostname CONTAINS "i-development.one" OR destinationhostname CONTAINS "aeternam.me" OR destinationhostname CONTAINS "nedbank.za.com" OR destinationhostname CONTAINS "nedbankplc.4nmn.com" OR destinationhostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "press.giize.com" OR sourcentdomain CONTAINS "tf-bank.com" OR sourcentdomain CONTAINS "i-development.one" OR sourcentdomain CONTAINS "aeternam.me" OR sourcentdomain CONTAINS "nedbank.za.com" OR sourcentdomain CONTAINS "nedbankplc.4nmn.com" OR sourcentdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "press.giize.com" OR sourcehostname CONTAINS "tf-bank.com" OR sourcehostname CONTAINS "i-development.one" OR sourcehostname CONTAINS "aeternam.me" OR sourcehostname CONTAINS "nedbank.za.com" OR sourcehostname CONTAINS "nedbankplc.4nmn.com" OR sourcehostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "press.giize.com" OR destinationntdomain CONTAINS "tf-bank.com" OR destinationntdomain CONTAINS "i-development.one" OR destinationntdomain CONTAINS "aeternam.me" OR destinationntdomain CONTAINS "nedbank.za.com" OR destinationntdomain CONTAINS "nedbankplc.4nmn.com" OR destinationntdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "press.giize.com" OR destinationhostname CONTAINS "tf-bank.com" OR destinationhostname CONTAINS "i-development.one" OR destinationhostname CONTAINS "aeternam.me" OR destinationhostname CONTAINS "nedbank.za.com" OR destinationhostname CONTAINS "nedbankplc.4nmn.com" OR destinationhostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "press.giize.com" OR sourcentdomain CONTAINS "tf-bank.com" OR sourcentdomain CONTAINS "i-development.one" OR sourcentdomain CONTAINS "aeternam.me" OR sourcentdomain CONTAINS "nedbank.za.com" OR sourcentdomain CONTAINS "nedbankplc.4nmn.com" OR sourcentdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "press.giize.com" OR sourcehostname CONTAINS "tf-bank.com" OR sourcehostname CONTAINS "i-development.one" OR sourcehostname CONTAINS "aeternam.me" OR sourcehostname CONTAINS "nedbank.za.com" OR sourcehostname CONTAINS "nedbankplc.4nmn.com" OR sourcehostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "press.giize.com" OR destinationntdomain CONTAINS "tf-bank.com" OR destinationntdomain CONTAINS "i-development.one" OR destinationntdomain CONTAINS "aeternam.me" OR destinationntdomain CONTAINS "nedbank.za.com" OR destinationntdomain CONTAINS "nedbankplc.4nmn.com" OR destinationntdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "press.giize.com" OR destinationhostname CONTAINS "tf-bank.com" OR destinationhostname CONTAINS "i-development.one" OR destinationhostname CONTAINS "aeternam.me" OR destinationhostname CONTAINS "nedbank.za.com" OR destinationhostname CONTAINS "nedbankplc.4nmn.com" OR destinationhostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "press.giize.com" OR sourcentdomain CONTAINS "tf-bank.com" OR sourcentdomain CONTAINS "i-development.one" OR sourcentdomain CONTAINS "aeternam.me" OR sourcentdomain CONTAINS "nedbank.za.com" OR sourcentdomain CONTAINS "nedbankplc.4nmn.com" OR sourcentdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "press.giize.com" OR sourcehostname CONTAINS "tf-bank.com" OR sourcehostname CONTAINS "i-development.one" OR sourcehostname CONTAINS "aeternam.me" OR sourcehostname CONTAINS "nedbank.za.com" OR sourcehostname CONTAINS "nedbankplc.4nmn.com" OR sourcehostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "press.giize.com" OR destinationntdomain CONTAINS "tf-bank.com" OR destinationntdomain CONTAINS "i-development.one" OR destinationntdomain CONTAINS "aeternam.me" OR destinationntdomain CONTAINS "nedbank.za.com" OR destinationntdomain CONTAINS "nedbankplc.4nmn.com" OR destinationntdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "press.giize.com" OR destinationhostname CONTAINS "tf-bank.com" OR destinationhostname CONTAINS "i-development.one" OR destinationhostname CONTAINS "aeternam.me" OR destinationhostname CONTAINS "nedbank.za.com" OR destinationhostname CONTAINS "nedbankplc.4nmn.com" OR destinationhostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "press.giize.com" OR sourcentdomain CONTAINS "tf-bank.com" OR sourcentdomain CONTAINS "i-development.one" OR sourcentdomain CONTAINS "aeternam.me" OR sourcentdomain CONTAINS "nedbank.za.com" OR sourcentdomain CONTAINS "nedbankplc.4nmn.com" OR sourcentdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "press.giize.com" OR sourcehostname CONTAINS "tf-bank.com" OR sourcehostname CONTAINS "i-development.one" OR sourcehostname CONTAINS "aeternam.me" OR sourcehostname CONTAINS "nedbank.za.com" OR sourcehostname CONTAINS "nedbankplc.4nmn.com" OR sourcehostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "press.giize.com" OR destinationntdomain CONTAINS "tf-bank.com" OR destinationntdomain CONTAINS "i-development.one" OR destinationntdomain CONTAINS "aeternam.me" OR destinationntdomain CONTAINS "nedbank.za.com" OR destinationntdomain CONTAINS "nedbankplc.4nmn.com" OR destinationntdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "press.giize.com" OR destinationhostname CONTAINS "tf-bank.com" OR destinationhostname CONTAINS "i-development.one" OR destinationhostname CONTAINS "aeternam.me" OR destinationhostname CONTAINS "nedbank.za.com" OR destinationhostname CONTAINS "nedbankplc.4nmn.com" OR destinationhostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "press.giize.com" OR sourcentdomain CONTAINS "tf-bank.com" OR sourcentdomain CONTAINS "i-development.one" OR sourcentdomain CONTAINS "aeternam.me" OR sourcentdomain CONTAINS "nedbank.za.com" OR sourcentdomain CONTAINS "nedbankplc.4nmn.com" OR sourcentdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "press.giize.com" OR sourcehostname CONTAINS "tf-bank.com" OR sourcehostname CONTAINS "i-development.one" OR sourcehostname CONTAINS "aeternam.me" OR sourcehostname CONTAINS "nedbank.za.com" OR sourcehostname CONTAINS "nedbankplc.4nmn.com" OR sourcehostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "press.giize.com" OR destinationntdomain CONTAINS "tf-bank.com" OR destinationntdomain CONTAINS "i-development.one" OR destinationntdomain CONTAINS "aeternam.me" OR destinationntdomain CONTAINS "nedbank.za.com" OR destinationntdomain CONTAINS "nedbankplc.4nmn.com" OR destinationntdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "press.giize.com" OR destinationhostname CONTAINS "tf-bank.com" OR destinationhostname CONTAINS "i-development.one" OR destinationhostname CONTAINS "aeternam.me" OR destinationhostname CONTAINS "nedbank.za.com" OR destinationhostname CONTAINS "nedbankplc.4nmn.com" OR destinationhostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "press.giize.com" OR sourcentdomain CONTAINS "tf-bank.com" OR sourcentdomain CONTAINS "i-development.one" OR sourcentdomain CONTAINS "aeternam.me" OR sourcentdomain CONTAINS "nedbank.za.com" OR sourcentdomain CONTAINS "nedbankplc.4nmn.com" OR sourcentdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "press.giize.com" OR sourcehostname CONTAINS "tf-bank.com" OR sourcehostname CONTAINS "i-development.one" OR sourcehostname CONTAINS "aeternam.me" OR sourcehostname CONTAINS "nedbank.za.com" OR sourcehostname CONTAINS "nedbankplc.4nmn.com" OR sourcehostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "press.giize.com" OR destinationntdomain CONTAINS "tf-bank.com" OR destinationntdomain CONTAINS "i-development.one" OR destinationntdomain CONTAINS "aeternam.me" OR destinationntdomain CONTAINS "nedbank.za.com" OR destinationntdomain CONTAINS "nedbankplc.4nmn.com" OR destinationntdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "press.giize.com" OR destinationhostname CONTAINS "tf-bank.com" OR destinationhostname CONTAINS "i-development.one" OR destinationhostname CONTAINS "aeternam.me" OR destinationhostname CONTAINS "nedbank.za.com" OR destinationhostname CONTAINS "nedbankplc.4nmn.com" OR destinationhostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "press.giize.com" OR sourcentdomain CONTAINS "tf-bank.com" OR sourcentdomain CONTAINS "i-development.one" OR sourcentdomain CONTAINS "aeternam.me" OR sourcentdomain CONTAINS "nedbank.za.com" OR sourcentdomain CONTAINS "nedbankplc.4nmn.com" OR sourcentdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "press.giize.com" OR sourcehostname CONTAINS "tf-bank.com" OR sourcehostname CONTAINS "i-development.one" OR sourcehostname CONTAINS "aeternam.me" OR sourcehostname CONTAINS "nedbank.za.com" OR sourcehostname CONTAINS "nedbankplc.4nmn.com" OR sourcehostname CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "press.giize.com" OR destinationntdomain CONTAINS "tf-bank.com" OR destinationntdomain CONTAINS "i-development.one" OR destinationntdomain CONTAINS "aeternam.me" OR destinationntdomain CONTAINS "nedbank.za.com" OR destinationntdomain CONTAINS "nedbankplc.4nmn.com" OR destinationntdomain CONTAINS "secure.graviom.fr")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("http://cdn.filesend.jp/private/hTsvHkbWaUSEZ7ilocBGMTgumxqFmSrVgF-9Ht5LL6YCf4A7Eu28rIxdbo-ND_F9/Chimers.gif","http://4sync.com/web/directDownload/QHZsERS6/rHb0lMWD.f2e6a9154ab6cd29b337d6b555367580","http://4sync.com/web/directDownload/rE33SDmE/iNXXJkWJ.4bf28df12d9e7d99bc902edb6d23c6e2","http://raw.githubusercontent.com/R3mEm/vox/main/vox.ps1","http://paste.c-net.org/ExportDeposit","http://paste.c-net.org/OrientalAntonio","http://paste.c-net.org/ShaveDavie","http://paste.c-net.org/SidingFatigue","http://paste.c-net.org/HearingsGuided","http://paste.c-net.org/SelvesGangster","http://paste.c-net.org/StaceConcerns","http://paste.c-net.org/BogeyUglier","http://paste.c-net.org/MuggingFunny","http://paste.c-net.org/NelsonTasteful","http://paste.inexa-group.com")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://cdn.filesend.jp/private/hTsvHkbWaUSEZ7ilocBGMTgumxqFmSrVgF-9Ht5LL6YCf4A7Eu28rIxdbo-ND_F9/Chimers.gif","http://4sync.com/web/directDownload/QHZsERS6/rHb0lMWD.f2e6a9154ab6cd29b337d6b555367580","http://4sync.com/web/directDownload/rE33SDmE/iNXXJkWJ.4bf28df12d9e7d99bc902edb6d23c6e2","http://raw.githubusercontent.com/R3mEm/vox/main/vox.ps1","http://paste.c-net.org/ExportDeposit","http://paste.c-net.org/OrientalAntonio","http://paste.c-net.org/ShaveDavie","http://paste.c-net.org/SidingFatigue","http://paste.c-net.org/HearingsGuided","http://paste.c-net.org/SelvesGangster","http://paste.c-net.org/StaceConcerns","http://paste.c-net.org/BogeyUglier","http://paste.c-net.org/MuggingFunny","http://paste.c-net.org/NelsonTasteful","http://paste.inexa-group.com")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://cdn.filesend.jp/private/hTsvHkbWaUSEZ7ilocBGMTgumxqFmSrVgF-9Ht5LL6YCf4A7Eu28rIxdbo-ND_F9/Chimers.gif","http://4sync.com/web/directDownload/QHZsERS6/rHb0lMWD.f2e6a9154ab6cd29b337d6b555367580","http://4sync.com/web/directDownload/rE33SDmE/iNXXJkWJ.4bf28df12d9e7d99bc902edb6d23c6e2","http://raw.githubusercontent.com/R3mEm/vox/main/vox.ps1","http://paste.c-net.org/ExportDeposit","http://paste.c-net.org/OrientalAntonio","http://paste.c-net.org/ShaveDavie","http://paste.c-net.org/SidingFatigue","http://paste.c-net.org/HearingsGuided","http://paste.c-net.org/SelvesGangster","http://paste.c-net.org/StaceConcerns","http://paste.c-net.org/BogeyUglier","http://paste.c-net.org/MuggingFunny","http://paste.c-net.org/NelsonTasteful","http://paste.inexa-group.com")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://cdn.filesend.jp/private/hTsvHkbWaUSEZ7ilocBGMTgumxqFmSrVgF-9Ht5LL6YCf4A7Eu28rIxdbo-ND_F9/Chimers.gif","http://4sync.com/web/directDownload/QHZsERS6/rHb0lMWD.f2e6a9154ab6cd29b337d6b555367580","http://4sync.com/web/directDownload/rE33SDmE/iNXXJkWJ.4bf28df12d9e7d99bc902edb6d23c6e2","http://raw.githubusercontent.com/R3mEm/vox/main/vox.ps1","http://paste.c-net.org/ExportDeposit","http://paste.c-net.org/OrientalAntonio","http://paste.c-net.org/ShaveDavie","http://paste.c-net.org/SidingFatigue","http://paste.c-net.org/HearingsGuided","http://paste.c-net.org/SelvesGangster","http://paste.c-net.org/StaceConcerns","http://paste.c-net.org/BogeyUglier","http://paste.c-net.org/MuggingFunny","http://paste.c-net.org/NelsonTasteful","http://paste.inexa-group.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://cdn.filesend.jp/private/hTsvHkbWaUSEZ7ilocBGMTgumxqFmSrVgF-9Ht5LL6YCf4A7Eu28rIxdbo-ND_F9/Chimers.gif","http://4sync.com/web/directDownload/QHZsERS6/rHb0lMWD.f2e6a9154ab6cd29b337d6b555367580","http://4sync.com/web/directDownload/rE33SDmE/iNXXJkWJ.4bf28df12d9e7d99bc902edb6d23c6e2","http://raw.githubusercontent.com/R3mEm/vox/main/vox.ps1","http://paste.c-net.org/ExportDeposit","http://paste.c-net.org/OrientalAntonio","http://paste.c-net.org/ShaveDavie","http://paste.c-net.org/SidingFatigue","http://paste.c-net.org/HearingsGuided","http://paste.c-net.org/SelvesGangster","http://paste.c-net.org/StaceConcerns","http://paste.c-net.org/BogeyUglier","http://paste.c-net.org/MuggingFunny","http://paste.c-net.org/NelsonTasteful","http://paste.inexa-group.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://cdn.filesend.jp/private/hTsvHkbWaUSEZ7ilocBGMTgumxqFmSrVgF-9Ht5LL6YCf4A7Eu28rIxdbo-ND_F9/Chimers.gif","http://4sync.com/web/directDownload/QHZsERS6/rHb0lMWD.f2e6a9154ab6cd29b337d6b555367580","http://4sync.com/web/directDownload/rE33SDmE/iNXXJkWJ.4bf28df12d9e7d99bc902edb6d23c6e2","http://raw.githubusercontent.com/R3mEm/vox/main/vox.ps1","http://paste.c-net.org/ExportDeposit","http://paste.c-net.org/OrientalAntonio","http://paste.c-net.org/ShaveDavie","http://paste.c-net.org/SidingFatigue","http://paste.c-net.org/HearingsGuided","http://paste.c-net.org/SelvesGangster","http://paste.c-net.org/StaceConcerns","http://paste.c-net.org/BogeyUglier","http://paste.c-net.org/MuggingFunny","http://paste.c-net.org/NelsonTasteful","http://paste.inexa-group.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://cdn.filesend.jp/private/hTsvHkbWaUSEZ7ilocBGMTgumxqFmSrVgF-9Ht5LL6YCf4A7Eu28rIxdbo-ND_F9/Chimers.gif","http://4sync.com/web/directDownload/QHZsERS6/rHb0lMWD.f2e6a9154ab6cd29b337d6b555367580","http://4sync.com/web/directDownload/rE33SDmE/iNXXJkWJ.4bf28df12d9e7d99bc902edb6d23c6e2","http://raw.githubusercontent.com/R3mEm/vox/main/vox.ps1","http://paste.c-net.org/ExportDeposit","http://paste.c-net.org/OrientalAntonio","http://paste.c-net.org/ShaveDavie","http://paste.c-net.org/SidingFatigue","http://paste.c-net.org/HearingsGuided","http://paste.c-net.org/SelvesGangster","http://paste.c-net.org/StaceConcerns","http://paste.c-net.org/BogeyUglier","http://paste.c-net.org/MuggingFunny","http://paste.c-net.org/NelsonTasteful","http://paste.inexa-group.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://cdn.filesend.jp/private/hTsvHkbWaUSEZ7ilocBGMTgumxqFmSrVgF-9Ht5LL6YCf4A7Eu28rIxdbo-ND_F9/Chimers.gif","http://4sync.com/web/directDownload/QHZsERS6/rHb0lMWD.f2e6a9154ab6cd29b337d6b555367580","http://4sync.com/web/directDownload/rE33SDmE/iNXXJkWJ.4bf28df12d9e7d99bc902edb6d23c6e2","http://raw.githubusercontent.com/R3mEm/vox/main/vox.ps1","http://paste.c-net.org/ExportDeposit","http://paste.c-net.org/OrientalAntonio","http://paste.c-net.org/ShaveDavie","http://paste.c-net.org/SidingFatigue","http://paste.c-net.org/HearingsGuided","http://paste.c-net.org/SelvesGangster","http://paste.c-net.org/StaceConcerns","http://paste.c-net.org/BogeyUglier","http://paste.c-net.org/MuggingFunny","http://paste.c-net.org/NelsonTasteful","http://paste.inexa-group.com")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://cdn.filesend.jp/private/hTsvHkbWaUSEZ7ilocBGMTgumxqFmSrVgF-9Ht5LL6YCf4A7Eu28rIxdbo-ND_F9/Chimers.gif","http://4sync.com/web/directDownload/QHZsERS6/rHb0lMWD.f2e6a9154ab6cd29b337d6b555367580","http://4sync.com/web/directDownload/rE33SDmE/iNXXJkWJ.4bf28df12d9e7d99bc902edb6d23c6e2","http://raw.githubusercontent.com/R3mEm/vox/main/vox.ps1","http://paste.c-net.org/ExportDeposit","http://paste.c-net.org/OrientalAntonio","http://paste.c-net.org/ShaveDavie","http://paste.c-net.org/SidingFatigue","http://paste.c-net.org/HearingsGuided","http://paste.c-net.org/SelvesGangster","http://paste.c-net.org/StaceConcerns","http://paste.c-net.org/BogeyUglier","http://paste.c-net.org/MuggingFunny","http://paste.c-net.org/NelsonTasteful","http://paste.inexa-group.com")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND requesturl IN ("http://cdn.filesend.jp/private/hTsvHkbWaUSEZ7ilocBGMTgumxqFmSrVgF-9Ht5LL6YCf4A7Eu28rIxdbo-ND_F9/Chimers.gif","http://4sync.com/web/directDownload/QHZsERS6/rHb0lMWD.f2e6a9154ab6cd29b337d6b555367580","http://4sync.com/web/directDownload/rE33SDmE/iNXXJkWJ.4bf28df12d9e7d99bc902edb6d23c6e2","http://raw.githubusercontent.com/R3mEm/vox/main/vox.ps1","http://paste.c-net.org/ExportDeposit","http://paste.c-net.org/OrientalAntonio","http://paste.c-net.org/ShaveDavie","http://paste.c-net.org/SidingFatigue","http://paste.c-net.org/HearingsGuided","http://paste.c-net.org/SelvesGangster","http://paste.c-net.org/StaceConcerns","http://paste.c-net.org/BogeyUglier","http://paste.c-net.org/MuggingFunny","http://paste.c-net.org/NelsonTasteful","http://paste.inexa-group.com")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://cdn.filesend.jp/private/hTsvHkbWaUSEZ7ilocBGMTgumxqFmSrVgF-9Ht5LL6YCf4A7Eu28rIxdbo-ND_F9/Chimers.gif","http://4sync.com/web/directDownload/QHZsERS6/rHb0lMWD.f2e6a9154ab6cd29b337d6b555367580","http://4sync.com/web/directDownload/rE33SDmE/iNXXJkWJ.4bf28df12d9e7d99bc902edb6d23c6e2","http://raw.githubusercontent.com/R3mEm/vox/main/vox.ps1","http://paste.c-net.org/ExportDeposit","http://paste.c-net.org/OrientalAntonio","http://paste.c-net.org/ShaveDavie","http://paste.c-net.org/SidingFatigue","http://paste.c-net.org/HearingsGuided","http://paste.c-net.org/SelvesGangster","http://paste.c-net.org/StaceConcerns","http://paste.c-net.org/BogeyUglier","http://paste.c-net.org/MuggingFunny","http://paste.c-net.org/NelsonTasteful","http://paste.inexa-group.com")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://cdn.filesend.jp/private/hTsvHkbWaUSEZ7ilocBGMTgumxqFmSrVgF-9Ht5LL6YCf4A7Eu28rIxdbo-ND_F9/Chimers.gif","http://4sync.com/web/directDownload/QHZsERS6/rHb0lMWD.f2e6a9154ab6cd29b337d6b555367580","http://4sync.com/web/directDownload/rE33SDmE/iNXXJkWJ.4bf28df12d9e7d99bc902edb6d23c6e2","http://raw.githubusercontent.com/R3mEm/vox/main/vox.ps1","http://paste.c-net.org/ExportDeposit","http://paste.c-net.org/OrientalAntonio","http://paste.c-net.org/ShaveDavie","http://paste.c-net.org/SidingFatigue","http://paste.c-net.org/HearingsGuided","http://paste.c-net.org/SelvesGangster","http://paste.c-net.org/StaceConcerns","http://paste.c-net.org/BogeyUglier","http://paste.c-net.org/MuggingFunny","http://paste.c-net.org/NelsonTasteful","http://paste.inexa-group.com")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://cdn.filesend.jp/private/hTsvHkbWaUSEZ7ilocBGMTgumxqFmSrVgF-9Ht5LL6YCf4A7Eu28rIxdbo-ND_F9/Chimers.gif","http://4sync.com/web/directDownload/QHZsERS6/rHb0lMWD.f2e6a9154ab6cd29b337d6b555367580","http://4sync.com/web/directDownload/rE33SDmE/iNXXJkWJ.4bf28df12d9e7d99bc902edb6d23c6e2","http://raw.githubusercontent.com/R3mEm/vox/main/vox.ps1","http://paste.c-net.org/ExportDeposit","http://paste.c-net.org/OrientalAntonio","http://paste.c-net.org/ShaveDavie","http://paste.c-net.org/SidingFatigue","http://paste.c-net.org/HearingsGuided","http://paste.c-net.org/SelvesGangster","http://paste.c-net.org/StaceConcerns","http://paste.c-net.org/BogeyUglier","http://paste.c-net.org/MuggingFunny","http://paste.c-net.org/NelsonTasteful","http://paste.inexa-group.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://cdn.filesend.jp/private/hTsvHkbWaUSEZ7ilocBGMTgumxqFmSrVgF-9Ht5LL6YCf4A7Eu28rIxdbo-ND_F9/Chimers.gif","http://4sync.com/web/directDownload/QHZsERS6/rHb0lMWD.f2e6a9154ab6cd29b337d6b555367580","http://4sync.com/web/directDownload/rE33SDmE/iNXXJkWJ.4bf28df12d9e7d99bc902edb6d23c6e2","http://raw.githubusercontent.com/R3mEm/vox/main/vox.ps1","http://paste.c-net.org/ExportDeposit","http://paste.c-net.org/OrientalAntonio","http://paste.c-net.org/ShaveDavie","http://paste.c-net.org/SidingFatigue","http://paste.c-net.org/HearingsGuided","http://paste.c-net.org/SelvesGangster","http://paste.c-net.org/StaceConcerns","http://paste.c-net.org/BogeyUglier","http://paste.c-net.org/MuggingFunny","http://paste.c-net.org/NelsonTasteful","http://paste.inexa-group.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://cdn.filesend.jp/private/hTsvHkbWaUSEZ7ilocBGMTgumxqFmSrVgF-9Ht5LL6YCf4A7Eu28rIxdbo-ND_F9/Chimers.gif","http://4sync.com/web/directDownload/QHZsERS6/rHb0lMWD.f2e6a9154ab6cd29b337d6b555367580","http://4sync.com/web/directDownload/rE33SDmE/iNXXJkWJ.4bf28df12d9e7d99bc902edb6d23c6e2","http://raw.githubusercontent.com/R3mEm/vox/main/vox.ps1","http://paste.c-net.org/ExportDeposit","http://paste.c-net.org/OrientalAntonio","http://paste.c-net.org/ShaveDavie","http://paste.c-net.org/SidingFatigue","http://paste.c-net.org/HearingsGuided","http://paste.c-net.org/SelvesGangster","http://paste.c-net.org/StaceConcerns","http://paste.c-net.org/BogeyUglier","http://paste.c-net.org/MuggingFunny","http://paste.c-net.org/NelsonTasteful","http://paste.inexa-group.com")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://cdn.filesend.jp/private/hTsvHkbWaUSEZ7ilocBGMTgumxqFmSrVgF-9Ht5LL6YCf4A7Eu28rIxdbo-ND_F9/Chimers.gif","http://4sync.com/web/directDownload/QHZsERS6/rHb0lMWD.f2e6a9154ab6cd29b337d6b555367580","http://4sync.com/web/directDownload/rE33SDmE/iNXXJkWJ.4bf28df12d9e7d99bc902edb6d23c6e2","http://raw.githubusercontent.com/R3mEm/vox/main/vox.ps1","http://paste.c-net.org/ExportDeposit","http://paste.c-net.org/OrientalAntonio","http://paste.c-net.org/ShaveDavie","http://paste.c-net.org/SidingFatigue","http://paste.c-net.org/HearingsGuided","http://paste.c-net.org/SelvesGangster","http://paste.c-net.org/StaceConcerns","http://paste.c-net.org/BogeyUglier","http://paste.c-net.org/MuggingFunny","http://paste.c-net.org/NelsonTasteful","http://paste.inexa-group.com")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND requesturl IN ("http://cdn.filesend.jp/private/hTsvHkbWaUSEZ7ilocBGMTgumxqFmSrVgF-9Ht5LL6YCf4A7Eu28rIxdbo-ND_F9/Chimers.gif","http://4sync.com/web/directDownload/QHZsERS6/rHb0lMWD.f2e6a9154ab6cd29b337d6b555367580","http://4sync.com/web/directDownload/rE33SDmE/iNXXJkWJ.4bf28df12d9e7d99bc902edb6d23c6e2","http://raw.githubusercontent.com/R3mEm/vox/main/vox.ps1","http://paste.c-net.org/ExportDeposit","http://paste.c-net.org/OrientalAntonio","http://paste.c-net.org/ShaveDavie","http://paste.c-net.org/SidingFatigue","http://paste.c-net.org/HearingsGuided","http://paste.c-net.org/SelvesGangster","http://paste.c-net.org/StaceConcerns","http://paste.c-net.org/BogeyUglier","http://paste.c-net.org/MuggingFunny","http://paste.c-net.org/NelsonTasteful","http://paste.inexa-group.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://cdn.filesend.jp/private/hTsvHkbWaUSEZ7ilocBGMTgumxqFmSrVgF-9Ht5LL6YCf4A7Eu28rIxdbo-ND_F9/Chimers.gif","http://4sync.com/web/directDownload/QHZsERS6/rHb0lMWD.f2e6a9154ab6cd29b337d6b555367580","http://4sync.com/web/directDownload/rE33SDmE/iNXXJkWJ.4bf28df12d9e7d99bc902edb6d23c6e2","http://raw.githubusercontent.com/R3mEm/vox/main/vox.ps1","http://paste.c-net.org/ExportDeposit","http://paste.c-net.org/OrientalAntonio","http://paste.c-net.org/ShaveDavie","http://paste.c-net.org/SidingFatigue","http://paste.c-net.org/HearingsGuided","http://paste.c-net.org/SelvesGangster","http://paste.c-net.org/StaceConcerns","http://paste.c-net.org/BogeyUglier","http://paste.c-net.org/MuggingFunny","http://paste.c-net.org/NelsonTasteful","http://paste.inexa-group.com")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND requesturl IN ("http://cdn.filesend.jp/private/hTsvHkbWaUSEZ7ilocBGMTgumxqFmSrVgF-9Ht5LL6YCf4A7Eu28rIxdbo-ND_F9/Chimers.gif","http://4sync.com/web/directDownload/QHZsERS6/rHb0lMWD.f2e6a9154ab6cd29b337d6b555367580","http://4sync.com/web/directDownload/rE33SDmE/iNXXJkWJ.4bf28df12d9e7d99bc902edb6d23c6e2","http://raw.githubusercontent.com/R3mEm/vox/main/vox.ps1","http://paste.c-net.org/ExportDeposit","http://paste.c-net.org/OrientalAntonio","http://paste.c-net.org/ShaveDavie","http://paste.c-net.org/SidingFatigue","http://paste.c-net.org/HearingsGuided","http://paste.c-net.org/SelvesGangster","http://paste.c-net.org/StaceConcerns","http://paste.c-net.org/BogeyUglier","http://paste.c-net.org/MuggingFunny","http://paste.c-net.org/NelsonTasteful","http://paste.inexa-group.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://cdn.filesend.jp/private/hTsvHkbWaUSEZ7ilocBGMTgumxqFmSrVgF-9Ht5LL6YCf4A7Eu28rIxdbo-ND_F9/Chimers.gif","http://4sync.com/web/directDownload/QHZsERS6/rHb0lMWD.f2e6a9154ab6cd29b337d6b555367580","http://4sync.com/web/directDownload/rE33SDmE/iNXXJkWJ.4bf28df12d9e7d99bc902edb6d23c6e2","http://raw.githubusercontent.com/R3mEm/vox/main/vox.ps1","http://paste.c-net.org/ExportDeposit","http://paste.c-net.org/OrientalAntonio","http://paste.c-net.org/ShaveDavie","http://paste.c-net.org/SidingFatigue","http://paste.c-net.org/HearingsGuided","http://paste.c-net.org/SelvesGangster","http://paste.c-net.org/StaceConcerns","http://paste.c-net.org/BogeyUglier","http://paste.c-net.org/MuggingFunny","http://paste.c-net.org/NelsonTasteful","http://paste.inexa-group.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND requesturl IN ("http://cdn.filesend.jp/private/hTsvHkbWaUSEZ7ilocBGMTgumxqFmSrVgF-9Ht5LL6YCf4A7Eu28rIxdbo-ND_F9/Chimers.gif","http://4sync.com/web/directDownload/QHZsERS6/rHb0lMWD.f2e6a9154ab6cd29b337d6b555367580","http://4sync.com/web/directDownload/rE33SDmE/iNXXJkWJ.4bf28df12d9e7d99bc902edb6d23c6e2","http://raw.githubusercontent.com/R3mEm/vox/main/vox.ps1","http://paste.c-net.org/ExportDeposit","http://paste.c-net.org/OrientalAntonio","http://paste.c-net.org/ShaveDavie","http://paste.c-net.org/SidingFatigue","http://paste.c-net.org/HearingsGuided","http://paste.c-net.org/SelvesGangster","http://paste.c-net.org/StaceConcerns","http://paste.c-net.org/BogeyUglier","http://paste.c-net.org/MuggingFunny","http://paste.c-net.org/NelsonTasteful","http://paste.inexa-group.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://cdn.filesend.jp/private/hTsvHkbWaUSEZ7ilocBGMTgumxqFmSrVgF-9Ht5LL6YCf4A7Eu28rIxdbo-ND_F9/Chimers.gif","http://4sync.com/web/directDownload/QHZsERS6/rHb0lMWD.f2e6a9154ab6cd29b337d6b555367580","http://4sync.com/web/directDownload/rE33SDmE/iNXXJkWJ.4bf28df12d9e7d99bc902edb6d23c6e2","http://raw.githubusercontent.com/R3mEm/vox/main/vox.ps1","http://paste.c-net.org/ExportDeposit","http://paste.c-net.org/OrientalAntonio","http://paste.c-net.org/ShaveDavie","http://paste.c-net.org/SidingFatigue","http://paste.c-net.org/HearingsGuided","http://paste.c-net.org/SelvesGangster","http://paste.c-net.org/StaceConcerns","http://paste.c-net.org/BogeyUglier","http://paste.c-net.org/MuggingFunny","http://paste.c-net.org/NelsonTasteful","http://paste.inexa-group.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://cdn.filesend.jp/private/hTsvHkbWaUSEZ7ilocBGMTgumxqFmSrVgF-9Ht5LL6YCf4A7Eu28rIxdbo-ND_F9/Chimers.gif","http://4sync.com/web/directDownload/QHZsERS6/rHb0lMWD.f2e6a9154ab6cd29b337d6b555367580","http://4sync.com/web/directDownload/rE33SDmE/iNXXJkWJ.4bf28df12d9e7d99bc902edb6d23c6e2","http://raw.githubusercontent.com/R3mEm/vox/main/vox.ps1","http://paste.c-net.org/ExportDeposit","http://paste.c-net.org/OrientalAntonio","http://paste.c-net.org/ShaveDavie","http://paste.c-net.org/SidingFatigue","http://paste.c-net.org/HearingsGuided","http://paste.c-net.org/SelvesGangster","http://paste.c-net.org/StaceConcerns","http://paste.c-net.org/BogeyUglier","http://paste.c-net.org/MuggingFunny","http://paste.c-net.org/NelsonTasteful","http://paste.inexa-group.com")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://cdn.filesend.jp/private/hTsvHkbWaUSEZ7ilocBGMTgumxqFmSrVgF-9Ht5LL6YCf4A7Eu28rIxdbo-ND_F9/Chimers.gif","http://4sync.com/web/directDownload/QHZsERS6/rHb0lMWD.f2e6a9154ab6cd29b337d6b555367580","http://4sync.com/web/directDownload/rE33SDmE/iNXXJkWJ.4bf28df12d9e7d99bc902edb6d23c6e2","http://raw.githubusercontent.com/R3mEm/vox/main/vox.ps1","http://paste.c-net.org/ExportDeposit","http://paste.c-net.org/OrientalAntonio","http://paste.c-net.org/ShaveDavie","http://paste.c-net.org/SidingFatigue","http://paste.c-net.org/HearingsGuided","http://paste.c-net.org/SelvesGangster","http://paste.c-net.org/StaceConcerns","http://paste.c-net.org/BogeyUglier","http://paste.c-net.org/MuggingFunny","http://paste.c-net.org/NelsonTasteful","http://paste.inexa-group.com")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://cdn.filesend.jp/private/hTsvHkbWaUSEZ7ilocBGMTgumxqFmSrVgF-9Ht5LL6YCf4A7Eu28rIxdbo-ND_F9/Chimers.gif","http://4sync.com/web/directDownload/QHZsERS6/rHb0lMWD.f2e6a9154ab6cd29b337d6b555367580","http://4sync.com/web/directDownload/rE33SDmE/iNXXJkWJ.4bf28df12d9e7d99bc902edb6d23c6e2","http://raw.githubusercontent.com/R3mEm/vox/main/vox.ps1","http://paste.c-net.org/ExportDeposit","http://paste.c-net.org/OrientalAntonio","http://paste.c-net.org/ShaveDavie","http://paste.c-net.org/SidingFatigue","http://paste.c-net.org/HearingsGuided","http://paste.c-net.org/SelvesGangster","http://paste.c-net.org/StaceConcerns","http://paste.c-net.org/BogeyUglier","http://paste.c-net.org/MuggingFunny","http://paste.c-net.org/NelsonTasteful","http://paste.inexa-group.com")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://cdn.filesend.jp/private/hTsvHkbWaUSEZ7ilocBGMTgumxqFmSrVgF-9Ht5LL6YCf4A7Eu28rIxdbo-ND_F9/Chimers.gif","http://4sync.com/web/directDownload/QHZsERS6/rHb0lMWD.f2e6a9154ab6cd29b337d6b555367580","http://4sync.com/web/directDownload/rE33SDmE/iNXXJkWJ.4bf28df12d9e7d99bc902edb6d23c6e2","http://raw.githubusercontent.com/R3mEm/vox/main/vox.ps1","http://paste.c-net.org/ExportDeposit","http://paste.c-net.org/OrientalAntonio","http://paste.c-net.org/ShaveDavie","http://paste.c-net.org/SidingFatigue","http://paste.c-net.org/HearingsGuided","http://paste.c-net.org/SelvesGangster","http://paste.c-net.org/StaceConcerns","http://paste.c-net.org/BogeyUglier","http://paste.c-net.org/MuggingFunny","http://paste.c-net.org/NelsonTasteful","http://paste.inexa-group.com")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://cdn.filesend.jp/private/hTsvHkbWaUSEZ7ilocBGMTgumxqFmSrVgF-9Ht5LL6YCf4A7Eu28rIxdbo-ND_F9/Chimers.gif","http://4sync.com/web/directDownload/QHZsERS6/rHb0lMWD.f2e6a9154ab6cd29b337d6b555367580","http://4sync.com/web/directDownload/rE33SDmE/iNXXJkWJ.4bf28df12d9e7d99bc902edb6d23c6e2","http://raw.githubusercontent.com/R3mEm/vox/main/vox.ps1","http://paste.c-net.org/ExportDeposit","http://paste.c-net.org/OrientalAntonio","http://paste.c-net.org/ShaveDavie","http://paste.c-net.org/SidingFatigue","http://paste.c-net.org/HearingsGuided","http://paste.c-net.org/SelvesGangster","http://paste.c-net.org/StaceConcerns","http://paste.c-net.org/BogeyUglier","http://paste.c-net.org/MuggingFunny","http://paste.c-net.org/NelsonTasteful","http://paste.inexa-group.com")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://cdn.filesend.jp/private/hTsvHkbWaUSEZ7ilocBGMTgumxqFmSrVgF-9Ht5LL6YCf4A7Eu28rIxdbo-ND_F9/Chimers.gif","http://4sync.com/web/directDownload/QHZsERS6/rHb0lMWD.f2e6a9154ab6cd29b337d6b555367580","http://4sync.com/web/directDownload/rE33SDmE/iNXXJkWJ.4bf28df12d9e7d99bc902edb6d23c6e2","http://raw.githubusercontent.com/R3mEm/vox/main/vox.ps1","http://paste.c-net.org/ExportDeposit","http://paste.c-net.org/OrientalAntonio","http://paste.c-net.org/ShaveDavie","http://paste.c-net.org/SidingFatigue","http://paste.c-net.org/HearingsGuided","http://paste.c-net.org/SelvesGangster","http://paste.c-net.org/StaceConcerns","http://paste.c-net.org/BogeyUglier","http://paste.c-net.org/MuggingFunny","http://paste.c-net.org/NelsonTasteful","http://paste.inexa-group.com")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://cdn.filesend.jp/private/hTsvHkbWaUSEZ7ilocBGMTgumxqFmSrVgF-9Ht5LL6YCf4A7Eu28rIxdbo-ND_F9/Chimers.gif","http://4sync.com/web/directDownload/QHZsERS6/rHb0lMWD.f2e6a9154ab6cd29b337d6b555367580","http://4sync.com/web/directDownload/rE33SDmE/iNXXJkWJ.4bf28df12d9e7d99bc902edb6d23c6e2","http://raw.githubusercontent.com/R3mEm/vox/main/vox.ps1","http://paste.c-net.org/ExportDeposit","http://paste.c-net.org/OrientalAntonio","http://paste.c-net.org/ShaveDavie","http://paste.c-net.org/SidingFatigue","http://paste.c-net.org/HearingsGuided","http://paste.c-net.org/SelvesGangster","http://paste.c-net.org/StaceConcerns","http://paste.c-net.org/BogeyUglier","http://paste.c-net.org/MuggingFunny","http://paste.c-net.org/NelsonTasteful","http://paste.inexa-group.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://cdn.filesend.jp/private/hTsvHkbWaUSEZ7ilocBGMTgumxqFmSrVgF-9Ht5LL6YCf4A7Eu28rIxdbo-ND_F9/Chimers.gif","http://4sync.com/web/directDownload/QHZsERS6/rHb0lMWD.f2e6a9154ab6cd29b337d6b555367580","http://4sync.com/web/directDownload/rE33SDmE/iNXXJkWJ.4bf28df12d9e7d99bc902edb6d23c6e2","http://raw.githubusercontent.com/R3mEm/vox/main/vox.ps1","http://paste.c-net.org/ExportDeposit","http://paste.c-net.org/OrientalAntonio","http://paste.c-net.org/ShaveDavie","http://paste.c-net.org/SidingFatigue","http://paste.c-net.org/HearingsGuided","http://paste.c-net.org/SelvesGangster","http://paste.c-net.org/StaceConcerns","http://paste.c-net.org/BogeyUglier","http://paste.c-net.org/MuggingFunny","http://paste.c-net.org/NelsonTasteful","http://paste.inexa-group.com")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://cdn.filesend.jp/private/hTsvHkbWaUSEZ7ilocBGMTgumxqFmSrVgF-9Ht5LL6YCf4A7Eu28rIxdbo-ND_F9/Chimers.gif","http://4sync.com/web/directDownload/QHZsERS6/rHb0lMWD.f2e6a9154ab6cd29b337d6b555367580","http://4sync.com/web/directDownload/rE33SDmE/iNXXJkWJ.4bf28df12d9e7d99bc902edb6d23c6e2","http://raw.githubusercontent.com/R3mEm/vox/main/vox.ps1","http://paste.c-net.org/ExportDeposit","http://paste.c-net.org/OrientalAntonio","http://paste.c-net.org/ShaveDavie","http://paste.c-net.org/SidingFatigue","http://paste.c-net.org/HearingsGuided","http://paste.c-net.org/SelvesGangster","http://paste.c-net.org/StaceConcerns","http://paste.c-net.org/BogeyUglier","http://paste.c-net.org/MuggingFunny","http://paste.c-net.org/NelsonTasteful","http://paste.inexa-group.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://cdn.filesend.jp/private/hTsvHkbWaUSEZ7ilocBGMTgumxqFmSrVgF-9Ht5LL6YCf4A7Eu28rIxdbo-ND_F9/Chimers.gif","http://4sync.com/web/directDownload/QHZsERS6/rHb0lMWD.f2e6a9154ab6cd29b337d6b555367580","http://4sync.com/web/directDownload/rE33SDmE/iNXXJkWJ.4bf28df12d9e7d99bc902edb6d23c6e2","http://raw.githubusercontent.com/R3mEm/vox/main/vox.ps1","http://paste.c-net.org/ExportDeposit","http://paste.c-net.org/OrientalAntonio","http://paste.c-net.org/ShaveDavie","http://paste.c-net.org/SidingFatigue","http://paste.c-net.org/HearingsGuided","http://paste.c-net.org/SelvesGangster","http://paste.c-net.org/StaceConcerns","http://paste.c-net.org/BogeyUglier","http://paste.c-net.org/MuggingFunny","http://paste.c-net.org/NelsonTasteful","http://paste.inexa-group.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://cdn.filesend.jp/private/hTsvHkbWaUSEZ7ilocBGMTgumxqFmSrVgF-9Ht5LL6YCf4A7Eu28rIxdbo-ND_F9/Chimers.gif","http://4sync.com/web/directDownload/QHZsERS6/rHb0lMWD.f2e6a9154ab6cd29b337d6b555367580","http://4sync.com/web/directDownload/rE33SDmE/iNXXJkWJ.4bf28df12d9e7d99bc902edb6d23c6e2","http://raw.githubusercontent.com/R3mEm/vox/main/vox.ps1","http://paste.c-net.org/ExportDeposit","http://paste.c-net.org/OrientalAntonio","http://paste.c-net.org/ShaveDavie","http://paste.c-net.org/SidingFatigue","http://paste.c-net.org/HearingsGuided","http://paste.c-net.org/SelvesGangster","http://paste.c-net.org/StaceConcerns","http://paste.c-net.org/BogeyUglier","http://paste.c-net.org/MuggingFunny","http://paste.c-net.org/NelsonTasteful","http://paste.inexa-group.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://cdn.filesend.jp/private/hTsvHkbWaUSEZ7ilocBGMTgumxqFmSrVgF-9Ht5LL6YCf4A7Eu28rIxdbo-ND_F9/Chimers.gif","http://4sync.com/web/directDownload/QHZsERS6/rHb0lMWD.f2e6a9154ab6cd29b337d6b555367580","http://4sync.com/web/directDownload/rE33SDmE/iNXXJkWJ.4bf28df12d9e7d99bc902edb6d23c6e2","http://raw.githubusercontent.com/R3mEm/vox/main/vox.ps1","http://paste.c-net.org/ExportDeposit","http://paste.c-net.org/OrientalAntonio","http://paste.c-net.org/ShaveDavie","http://paste.c-net.org/SidingFatigue","http://paste.c-net.org/HearingsGuided","http://paste.c-net.org/SelvesGangster","http://paste.c-net.org/StaceConcerns","http://paste.c-net.org/BogeyUglier","http://paste.c-net.org/MuggingFunny","http://paste.c-net.org/NelsonTasteful","http://paste.inexa-group.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://cdn.filesend.jp/private/hTsvHkbWaUSEZ7ilocBGMTgumxqFmSrVgF-9Ht5LL6YCf4A7Eu28rIxdbo-ND_F9/Chimers.gif","http://4sync.com/web/directDownload/QHZsERS6/rHb0lMWD.f2e6a9154ab6cd29b337d6b555367580","http://4sync.com/web/directDownload/rE33SDmE/iNXXJkWJ.4bf28df12d9e7d99bc902edb6d23c6e2","http://raw.githubusercontent.com/R3mEm/vox/main/vox.ps1","http://paste.c-net.org/ExportDeposit","http://paste.c-net.org/OrientalAntonio","http://paste.c-net.org/ShaveDavie","http://paste.c-net.org/SidingFatigue","http://paste.c-net.org/HearingsGuided","http://paste.c-net.org/SelvesGangster","http://paste.c-net.org/StaceConcerns","http://paste.c-net.org/BogeyUglier","http://paste.c-net.org/MuggingFunny","http://paste.c-net.org/NelsonTasteful","http://paste.inexa-group.com")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://cdn.filesend.jp/private/hTsvHkbWaUSEZ7ilocBGMTgumxqFmSrVgF-9Ht5LL6YCf4A7Eu28rIxdbo-ND_F9/Chimers.gif","http://4sync.com/web/directDownload/QHZsERS6/rHb0lMWD.f2e6a9154ab6cd29b337d6b555367580","http://4sync.com/web/directDownload/rE33SDmE/iNXXJkWJ.4bf28df12d9e7d99bc902edb6d23c6e2","http://raw.githubusercontent.com/R3mEm/vox/main/vox.ps1","http://paste.c-net.org/ExportDeposit","http://paste.c-net.org/OrientalAntonio","http://paste.c-net.org/ShaveDavie","http://paste.c-net.org/SidingFatigue","http://paste.c-net.org/HearingsGuided","http://paste.c-net.org/SelvesGangster","http://paste.c-net.org/StaceConcerns","http://paste.c-net.org/BogeyUglier","http://paste.c-net.org/MuggingFunny","http://paste.c-net.org/NelsonTasteful","http://paste.inexa-group.com")
index=activity AND rg_functionality="Endpoint Management Systems" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Endpoint Management Systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Flow" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Server" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Endpoint management systems" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Application Audit" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Unix / Linux / AIX" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Application Security Broker" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Source Code Repository" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Flow" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Server" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Application Security Broker" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Source Code Repository" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Flow" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Server" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="DNS / DHCP" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="DNS / DHCP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Endpoint management systems" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Microsoft Windows" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Microsoft Windows" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Microsoft Windows" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Microsoft Windows" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Microsoft Windows" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Services / Applications" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Application Audit" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Authentication / VPN" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Unix / Linux / AIX" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Network Access Control / NAC" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Network Access Control / NAC" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Network Access Control / NAC" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Virtualization / Containers" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Virtualization / Containers" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Virtualization / Containers" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Access / Privileged User" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Access / Privileged User" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Access / Privileged User" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Access / Privileged User" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Access / Privileged User" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Access / Identity Management" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Access / Identity Management" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Access / Identity Management" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Access / Identity Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Access / Identity Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Identity Access Management" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Identity Access Management" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Identity Access Management" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Identity Access Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Identity Access Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Authentication / WiFi" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Application Security Broker" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Source Code Repository" AND ipaddress NOT NULL AND ipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND translatedipaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("15.236.51.204","3.8.126.182","35.181.50.113","13.38.90.3","137.116.142.70","170.130.172.46","20.70.163.11")
