index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("db03a34684feab7475862080f59d4d99b32c74d3a152a53b257fd1a443e8ee77�","e99f3517a36a9f7a55335699cfb4d84d08b042d47146119156f7f3bab580b4d7�","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","97e093f2e0bf6dec8392618722dd6b4411088fe752bedece910d11fffe0288a2","f9c69e79e7799df31d6516df70148d7832b121d330beebe52cff6606f0724c62�","d9471b038c44619739176381815bfa9a13b5ff77021007a4ede9b146ed2e04ec�","d98cd810d568f338f16c4637e8a9cb01ff69ee1967f4cfc004de3f283d61ba81�","47d66c576393a4256d94f5ed1e77adc28426dea027f7a23e2dbf41b93b87bd78","60c4b6c230a40c80381ce283f64603cac08d3a69ceea91e257c17282f66ceddc�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","a189963ff252f547fddfc394c81f6e9d49eac403c32154eebe06f4cddb5a2a22�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","4416b8c36cb9d7cc261ff6612e105463eb2ccd4681930ca8e277a6387cb98794�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","090f2c5abb85a7b115dc25ae070153e4e958ae4e1bc2310226c05cd3e9429446�","ee1e5b80a1d3d47c7703ea2b6b64ee96283ab3628ee4fa1fef6d35d1d9051e9f�","3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567","6904d382bc045eb9a4899a403a8ba8a417d9ccb764f6e0b462bc0232d3b7e7ea�","71fb25cc4c05ce9dd94614ed781d85a50dccf69042521abc6782d48df85e6de9","856dfa74e0f3b5b7d6f79491a94560dbf3eacacc4a8d8a3238696fa38a4883ea�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","5d881d14d2336273e531b1b3d6f2d907539fe8489cbe80533280c9c72efa2273","10c129e2310342a55df5fa88331f338452835790a379d5230ee8de7d5f28ea1a�","781c63cf4981fa6aff002188307b278fac9785ca66f0b6dfcf68adbe7512e491�","aa29a8af8d615b1dd9f52fd49d42563fbeafa35ff0ab1b4afc4cb2b2fa54a119�","0ac5030e2171914f43e0769cb10b602683ccc9da09369bcd4b80da6edb8be80e�","0e96cf6166b7cc279f99d6977ab0f45e9f47e827b8a24d6665ac4c29e18b5ce0�","77270e13d01b2318a3f27a9a477b8386f1a0ebc6d44a2c7e185cfbe55aac8017","e7ff6a7ac5bfb0bb29547d413591abc7628c7d5576a3b43f6d8e5d95769e553a�","dedbc21afc768d749405de535f9b415baaf96f7664ded55d54829a425fc61d7e�","378d220bc863a527c2bca204daba36f10358e058df49ef088f8b1045604d9d05�","edeacd49aff3cfea35d593e455f7caca35ac877ad6dc19054458d41021e0e13a�","9c27405cf926d36ed8e247c17e6743ac00912789efe0c530914d7495de1e21ec�","9a8847168fa869331faf08db71690f24e567c5cdf1f01cc5e2a8d08c93d282c9��")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("db03a34684feab7475862080f59d4d99b32c74d3a152a53b257fd1a443e8ee77�","e99f3517a36a9f7a55335699cfb4d84d08b042d47146119156f7f3bab580b4d7�","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","97e093f2e0bf6dec8392618722dd6b4411088fe752bedece910d11fffe0288a2","f9c69e79e7799df31d6516df70148d7832b121d330beebe52cff6606f0724c62�","d9471b038c44619739176381815bfa9a13b5ff77021007a4ede9b146ed2e04ec�","d98cd810d568f338f16c4637e8a9cb01ff69ee1967f4cfc004de3f283d61ba81�","47d66c576393a4256d94f5ed1e77adc28426dea027f7a23e2dbf41b93b87bd78","60c4b6c230a40c80381ce283f64603cac08d3a69ceea91e257c17282f66ceddc�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","a189963ff252f547fddfc394c81f6e9d49eac403c32154eebe06f4cddb5a2a22�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","4416b8c36cb9d7cc261ff6612e105463eb2ccd4681930ca8e277a6387cb98794�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","090f2c5abb85a7b115dc25ae070153e4e958ae4e1bc2310226c05cd3e9429446�","ee1e5b80a1d3d47c7703ea2b6b64ee96283ab3628ee4fa1fef6d35d1d9051e9f�","3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567","6904d382bc045eb9a4899a403a8ba8a417d9ccb764f6e0b462bc0232d3b7e7ea�","71fb25cc4c05ce9dd94614ed781d85a50dccf69042521abc6782d48df85e6de9","856dfa74e0f3b5b7d6f79491a94560dbf3eacacc4a8d8a3238696fa38a4883ea�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","5d881d14d2336273e531b1b3d6f2d907539fe8489cbe80533280c9c72efa2273","10c129e2310342a55df5fa88331f338452835790a379d5230ee8de7d5f28ea1a�","781c63cf4981fa6aff002188307b278fac9785ca66f0b6dfcf68adbe7512e491�","aa29a8af8d615b1dd9f52fd49d42563fbeafa35ff0ab1b4afc4cb2b2fa54a119�","0ac5030e2171914f43e0769cb10b602683ccc9da09369bcd4b80da6edb8be80e�","0e96cf6166b7cc279f99d6977ab0f45e9f47e827b8a24d6665ac4c29e18b5ce0�","77270e13d01b2318a3f27a9a477b8386f1a0ebc6d44a2c7e185cfbe55aac8017","e7ff6a7ac5bfb0bb29547d413591abc7628c7d5576a3b43f6d8e5d95769e553a�","dedbc21afc768d749405de535f9b415baaf96f7664ded55d54829a425fc61d7e�","378d220bc863a527c2bca204daba36f10358e058df49ef088f8b1045604d9d05�","edeacd49aff3cfea35d593e455f7caca35ac877ad6dc19054458d41021e0e13a�","9c27405cf926d36ed8e247c17e6743ac00912789efe0c530914d7495de1e21ec�","9a8847168fa869331faf08db71690f24e567c5cdf1f01cc5e2a8d08c93d282c9��")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("db03a34684feab7475862080f59d4d99b32c74d3a152a53b257fd1a443e8ee77�","e99f3517a36a9f7a55335699cfb4d84d08b042d47146119156f7f3bab580b4d7�","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","97e093f2e0bf6dec8392618722dd6b4411088fe752bedece910d11fffe0288a2","f9c69e79e7799df31d6516df70148d7832b121d330beebe52cff6606f0724c62�","d9471b038c44619739176381815bfa9a13b5ff77021007a4ede9b146ed2e04ec�","d98cd810d568f338f16c4637e8a9cb01ff69ee1967f4cfc004de3f283d61ba81�","47d66c576393a4256d94f5ed1e77adc28426dea027f7a23e2dbf41b93b87bd78","60c4b6c230a40c80381ce283f64603cac08d3a69ceea91e257c17282f66ceddc�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","a189963ff252f547fddfc394c81f6e9d49eac403c32154eebe06f4cddb5a2a22�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","4416b8c36cb9d7cc261ff6612e105463eb2ccd4681930ca8e277a6387cb98794�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","090f2c5abb85a7b115dc25ae070153e4e958ae4e1bc2310226c05cd3e9429446�","ee1e5b80a1d3d47c7703ea2b6b64ee96283ab3628ee4fa1fef6d35d1d9051e9f�","3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567","6904d382bc045eb9a4899a403a8ba8a417d9ccb764f6e0b462bc0232d3b7e7ea�","71fb25cc4c05ce9dd94614ed781d85a50dccf69042521abc6782d48df85e6de9","856dfa74e0f3b5b7d6f79491a94560dbf3eacacc4a8d8a3238696fa38a4883ea�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","5d881d14d2336273e531b1b3d6f2d907539fe8489cbe80533280c9c72efa2273","10c129e2310342a55df5fa88331f338452835790a379d5230ee8de7d5f28ea1a�","781c63cf4981fa6aff002188307b278fac9785ca66f0b6dfcf68adbe7512e491�","aa29a8af8d615b1dd9f52fd49d42563fbeafa35ff0ab1b4afc4cb2b2fa54a119�","0ac5030e2171914f43e0769cb10b602683ccc9da09369bcd4b80da6edb8be80e�","0e96cf6166b7cc279f99d6977ab0f45e9f47e827b8a24d6665ac4c29e18b5ce0�","77270e13d01b2318a3f27a9a477b8386f1a0ebc6d44a2c7e185cfbe55aac8017","e7ff6a7ac5bfb0bb29547d413591abc7628c7d5576a3b43f6d8e5d95769e553a�","dedbc21afc768d749405de535f9b415baaf96f7664ded55d54829a425fc61d7e�","378d220bc863a527c2bca204daba36f10358e058df49ef088f8b1045604d9d05�","edeacd49aff3cfea35d593e455f7caca35ac877ad6dc19054458d41021e0e13a�","9c27405cf926d36ed8e247c17e6743ac00912789efe0c530914d7495de1e21ec�","9a8847168fa869331faf08db71690f24e567c5cdf1f01cc5e2a8d08c93d282c9��")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("db03a34684feab7475862080f59d4d99b32c74d3a152a53b257fd1a443e8ee77�","e99f3517a36a9f7a55335699cfb4d84d08b042d47146119156f7f3bab580b4d7�","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","97e093f2e0bf6dec8392618722dd6b4411088fe752bedece910d11fffe0288a2","f9c69e79e7799df31d6516df70148d7832b121d330beebe52cff6606f0724c62�","d9471b038c44619739176381815bfa9a13b5ff77021007a4ede9b146ed2e04ec�","d98cd810d568f338f16c4637e8a9cb01ff69ee1967f4cfc004de3f283d61ba81�","47d66c576393a4256d94f5ed1e77adc28426dea027f7a23e2dbf41b93b87bd78","60c4b6c230a40c80381ce283f64603cac08d3a69ceea91e257c17282f66ceddc�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","a189963ff252f547fddfc394c81f6e9d49eac403c32154eebe06f4cddb5a2a22�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","4416b8c36cb9d7cc261ff6612e105463eb2ccd4681930ca8e277a6387cb98794�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","090f2c5abb85a7b115dc25ae070153e4e958ae4e1bc2310226c05cd3e9429446�","ee1e5b80a1d3d47c7703ea2b6b64ee96283ab3628ee4fa1fef6d35d1d9051e9f�","3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567","6904d382bc045eb9a4899a403a8ba8a417d9ccb764f6e0b462bc0232d3b7e7ea�","71fb25cc4c05ce9dd94614ed781d85a50dccf69042521abc6782d48df85e6de9","856dfa74e0f3b5b7d6f79491a94560dbf3eacacc4a8d8a3238696fa38a4883ea�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","5d881d14d2336273e531b1b3d6f2d907539fe8489cbe80533280c9c72efa2273","10c129e2310342a55df5fa88331f338452835790a379d5230ee8de7d5f28ea1a�","781c63cf4981fa6aff002188307b278fac9785ca66f0b6dfcf68adbe7512e491�","aa29a8af8d615b1dd9f52fd49d42563fbeafa35ff0ab1b4afc4cb2b2fa54a119�","0ac5030e2171914f43e0769cb10b602683ccc9da09369bcd4b80da6edb8be80e�","0e96cf6166b7cc279f99d6977ab0f45e9f47e827b8a24d6665ac4c29e18b5ce0�","77270e13d01b2318a3f27a9a477b8386f1a0ebc6d44a2c7e185cfbe55aac8017","e7ff6a7ac5bfb0bb29547d413591abc7628c7d5576a3b43f6d8e5d95769e553a�","dedbc21afc768d749405de535f9b415baaf96f7664ded55d54829a425fc61d7e�","378d220bc863a527c2bca204daba36f10358e058df49ef088f8b1045604d9d05�","edeacd49aff3cfea35d593e455f7caca35ac877ad6dc19054458d41021e0e13a�","9c27405cf926d36ed8e247c17e6743ac00912789efe0c530914d7495de1e21ec�","9a8847168fa869331faf08db71690f24e567c5cdf1f01cc5e2a8d08c93d282c9��")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("db03a34684feab7475862080f59d4d99b32c74d3a152a53b257fd1a443e8ee77�","e99f3517a36a9f7a55335699cfb4d84d08b042d47146119156f7f3bab580b4d7�","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","97e093f2e0bf6dec8392618722dd6b4411088fe752bedece910d11fffe0288a2","f9c69e79e7799df31d6516df70148d7832b121d330beebe52cff6606f0724c62�","d9471b038c44619739176381815bfa9a13b5ff77021007a4ede9b146ed2e04ec�","d98cd810d568f338f16c4637e8a9cb01ff69ee1967f4cfc004de3f283d61ba81�","47d66c576393a4256d94f5ed1e77adc28426dea027f7a23e2dbf41b93b87bd78","60c4b6c230a40c80381ce283f64603cac08d3a69ceea91e257c17282f66ceddc�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","a189963ff252f547fddfc394c81f6e9d49eac403c32154eebe06f4cddb5a2a22�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","4416b8c36cb9d7cc261ff6612e105463eb2ccd4681930ca8e277a6387cb98794�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","090f2c5abb85a7b115dc25ae070153e4e958ae4e1bc2310226c05cd3e9429446�","ee1e5b80a1d3d47c7703ea2b6b64ee96283ab3628ee4fa1fef6d35d1d9051e9f�","3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567","6904d382bc045eb9a4899a403a8ba8a417d9ccb764f6e0b462bc0232d3b7e7ea�","71fb25cc4c05ce9dd94614ed781d85a50dccf69042521abc6782d48df85e6de9","856dfa74e0f3b5b7d6f79491a94560dbf3eacacc4a8d8a3238696fa38a4883ea�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","5d881d14d2336273e531b1b3d6f2d907539fe8489cbe80533280c9c72efa2273","10c129e2310342a55df5fa88331f338452835790a379d5230ee8de7d5f28ea1a�","781c63cf4981fa6aff002188307b278fac9785ca66f0b6dfcf68adbe7512e491�","aa29a8af8d615b1dd9f52fd49d42563fbeafa35ff0ab1b4afc4cb2b2fa54a119�","0ac5030e2171914f43e0769cb10b602683ccc9da09369bcd4b80da6edb8be80e�","0e96cf6166b7cc279f99d6977ab0f45e9f47e827b8a24d6665ac4c29e18b5ce0�","77270e13d01b2318a3f27a9a477b8386f1a0ebc6d44a2c7e185cfbe55aac8017","e7ff6a7ac5bfb0bb29547d413591abc7628c7d5576a3b43f6d8e5d95769e553a�","dedbc21afc768d749405de535f9b415baaf96f7664ded55d54829a425fc61d7e�","378d220bc863a527c2bca204daba36f10358e058df49ef088f8b1045604d9d05�","edeacd49aff3cfea35d593e455f7caca35ac877ad6dc19054458d41021e0e13a�","9c27405cf926d36ed8e247c17e6743ac00912789efe0c530914d7495de1e21ec�","9a8847168fa869331faf08db71690f24e567c5cdf1f01cc5e2a8d08c93d282c9��")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("db03a34684feab7475862080f59d4d99b32c74d3a152a53b257fd1a443e8ee77�","e99f3517a36a9f7a55335699cfb4d84d08b042d47146119156f7f3bab580b4d7�","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","97e093f2e0bf6dec8392618722dd6b4411088fe752bedece910d11fffe0288a2","f9c69e79e7799df31d6516df70148d7832b121d330beebe52cff6606f0724c62�","d9471b038c44619739176381815bfa9a13b5ff77021007a4ede9b146ed2e04ec�","d98cd810d568f338f16c4637e8a9cb01ff69ee1967f4cfc004de3f283d61ba81�","47d66c576393a4256d94f5ed1e77adc28426dea027f7a23e2dbf41b93b87bd78","60c4b6c230a40c80381ce283f64603cac08d3a69ceea91e257c17282f66ceddc�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","a189963ff252f547fddfc394c81f6e9d49eac403c32154eebe06f4cddb5a2a22�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","4416b8c36cb9d7cc261ff6612e105463eb2ccd4681930ca8e277a6387cb98794�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","090f2c5abb85a7b115dc25ae070153e4e958ae4e1bc2310226c05cd3e9429446�","ee1e5b80a1d3d47c7703ea2b6b64ee96283ab3628ee4fa1fef6d35d1d9051e9f�","3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567","6904d382bc045eb9a4899a403a8ba8a417d9ccb764f6e0b462bc0232d3b7e7ea�","71fb25cc4c05ce9dd94614ed781d85a50dccf69042521abc6782d48df85e6de9","856dfa74e0f3b5b7d6f79491a94560dbf3eacacc4a8d8a3238696fa38a4883ea�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","5d881d14d2336273e531b1b3d6f2d907539fe8489cbe80533280c9c72efa2273","10c129e2310342a55df5fa88331f338452835790a379d5230ee8de7d5f28ea1a�","781c63cf4981fa6aff002188307b278fac9785ca66f0b6dfcf68adbe7512e491�","aa29a8af8d615b1dd9f52fd49d42563fbeafa35ff0ab1b4afc4cb2b2fa54a119�","0ac5030e2171914f43e0769cb10b602683ccc9da09369bcd4b80da6edb8be80e�","0e96cf6166b7cc279f99d6977ab0f45e9f47e827b8a24d6665ac4c29e18b5ce0�","77270e13d01b2318a3f27a9a477b8386f1a0ebc6d44a2c7e185cfbe55aac8017","e7ff6a7ac5bfb0bb29547d413591abc7628c7d5576a3b43f6d8e5d95769e553a�","dedbc21afc768d749405de535f9b415baaf96f7664ded55d54829a425fc61d7e�","378d220bc863a527c2bca204daba36f10358e058df49ef088f8b1045604d9d05�","edeacd49aff3cfea35d593e455f7caca35ac877ad6dc19054458d41021e0e13a�","9c27405cf926d36ed8e247c17e6743ac00912789efe0c530914d7495de1e21ec�","9a8847168fa869331faf08db71690f24e567c5cdf1f01cc5e2a8d08c93d282c9��")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("db03a34684feab7475862080f59d4d99b32c74d3a152a53b257fd1a443e8ee77�","e99f3517a36a9f7a55335699cfb4d84d08b042d47146119156f7f3bab580b4d7�","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","97e093f2e0bf6dec8392618722dd6b4411088fe752bedece910d11fffe0288a2","f9c69e79e7799df31d6516df70148d7832b121d330beebe52cff6606f0724c62�","d9471b038c44619739176381815bfa9a13b5ff77021007a4ede9b146ed2e04ec�","d98cd810d568f338f16c4637e8a9cb01ff69ee1967f4cfc004de3f283d61ba81�","47d66c576393a4256d94f5ed1e77adc28426dea027f7a23e2dbf41b93b87bd78","60c4b6c230a40c80381ce283f64603cac08d3a69ceea91e257c17282f66ceddc�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","a189963ff252f547fddfc394c81f6e9d49eac403c32154eebe06f4cddb5a2a22�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","4416b8c36cb9d7cc261ff6612e105463eb2ccd4681930ca8e277a6387cb98794�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","090f2c5abb85a7b115dc25ae070153e4e958ae4e1bc2310226c05cd3e9429446�","ee1e5b80a1d3d47c7703ea2b6b64ee96283ab3628ee4fa1fef6d35d1d9051e9f�","3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567","6904d382bc045eb9a4899a403a8ba8a417d9ccb764f6e0b462bc0232d3b7e7ea�","71fb25cc4c05ce9dd94614ed781d85a50dccf69042521abc6782d48df85e6de9","856dfa74e0f3b5b7d6f79491a94560dbf3eacacc4a8d8a3238696fa38a4883ea�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","5d881d14d2336273e531b1b3d6f2d907539fe8489cbe80533280c9c72efa2273","10c129e2310342a55df5fa88331f338452835790a379d5230ee8de7d5f28ea1a�","781c63cf4981fa6aff002188307b278fac9785ca66f0b6dfcf68adbe7512e491�","aa29a8af8d615b1dd9f52fd49d42563fbeafa35ff0ab1b4afc4cb2b2fa54a119�","0ac5030e2171914f43e0769cb10b602683ccc9da09369bcd4b80da6edb8be80e�","0e96cf6166b7cc279f99d6977ab0f45e9f47e827b8a24d6665ac4c29e18b5ce0�","77270e13d01b2318a3f27a9a477b8386f1a0ebc6d44a2c7e185cfbe55aac8017","e7ff6a7ac5bfb0bb29547d413591abc7628c7d5576a3b43f6d8e5d95769e553a�","dedbc21afc768d749405de535f9b415baaf96f7664ded55d54829a425fc61d7e�","378d220bc863a527c2bca204daba36f10358e058df49ef088f8b1045604d9d05�","edeacd49aff3cfea35d593e455f7caca35ac877ad6dc19054458d41021e0e13a�","9c27405cf926d36ed8e247c17e6743ac00912789efe0c530914d7495de1e21ec�","9a8847168fa869331faf08db71690f24e567c5cdf1f01cc5e2a8d08c93d282c9��")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("db03a34684feab7475862080f59d4d99b32c74d3a152a53b257fd1a443e8ee77�","e99f3517a36a9f7a55335699cfb4d84d08b042d47146119156f7f3bab580b4d7�","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","97e093f2e0bf6dec8392618722dd6b4411088fe752bedece910d11fffe0288a2","f9c69e79e7799df31d6516df70148d7832b121d330beebe52cff6606f0724c62�","d9471b038c44619739176381815bfa9a13b5ff77021007a4ede9b146ed2e04ec�","d98cd810d568f338f16c4637e8a9cb01ff69ee1967f4cfc004de3f283d61ba81�","47d66c576393a4256d94f5ed1e77adc28426dea027f7a23e2dbf41b93b87bd78","60c4b6c230a40c80381ce283f64603cac08d3a69ceea91e257c17282f66ceddc�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","a189963ff252f547fddfc394c81f6e9d49eac403c32154eebe06f4cddb5a2a22�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","4416b8c36cb9d7cc261ff6612e105463eb2ccd4681930ca8e277a6387cb98794�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","090f2c5abb85a7b115dc25ae070153e4e958ae4e1bc2310226c05cd3e9429446�","ee1e5b80a1d3d47c7703ea2b6b64ee96283ab3628ee4fa1fef6d35d1d9051e9f�","3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567","6904d382bc045eb9a4899a403a8ba8a417d9ccb764f6e0b462bc0232d3b7e7ea�","71fb25cc4c05ce9dd94614ed781d85a50dccf69042521abc6782d48df85e6de9","856dfa74e0f3b5b7d6f79491a94560dbf3eacacc4a8d8a3238696fa38a4883ea�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","5d881d14d2336273e531b1b3d6f2d907539fe8489cbe80533280c9c72efa2273","10c129e2310342a55df5fa88331f338452835790a379d5230ee8de7d5f28ea1a�","781c63cf4981fa6aff002188307b278fac9785ca66f0b6dfcf68adbe7512e491�","aa29a8af8d615b1dd9f52fd49d42563fbeafa35ff0ab1b4afc4cb2b2fa54a119�","0ac5030e2171914f43e0769cb10b602683ccc9da09369bcd4b80da6edb8be80e�","0e96cf6166b7cc279f99d6977ab0f45e9f47e827b8a24d6665ac4c29e18b5ce0�","77270e13d01b2318a3f27a9a477b8386f1a0ebc6d44a2c7e185cfbe55aac8017","e7ff6a7ac5bfb0bb29547d413591abc7628c7d5576a3b43f6d8e5d95769e553a�","dedbc21afc768d749405de535f9b415baaf96f7664ded55d54829a425fc61d7e�","378d220bc863a527c2bca204daba36f10358e058df49ef088f8b1045604d9d05�","edeacd49aff3cfea35d593e455f7caca35ac877ad6dc19054458d41021e0e13a�","9c27405cf926d36ed8e247c17e6743ac00912789efe0c530914d7495de1e21ec�","9a8847168fa869331faf08db71690f24e567c5cdf1f01cc5e2a8d08c93d282c9��")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("db03a34684feab7475862080f59d4d99b32c74d3a152a53b257fd1a443e8ee77�","e99f3517a36a9f7a55335699cfb4d84d08b042d47146119156f7f3bab580b4d7�","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","97e093f2e0bf6dec8392618722dd6b4411088fe752bedece910d11fffe0288a2","f9c69e79e7799df31d6516df70148d7832b121d330beebe52cff6606f0724c62�","d9471b038c44619739176381815bfa9a13b5ff77021007a4ede9b146ed2e04ec�","d98cd810d568f338f16c4637e8a9cb01ff69ee1967f4cfc004de3f283d61ba81�","47d66c576393a4256d94f5ed1e77adc28426dea027f7a23e2dbf41b93b87bd78","60c4b6c230a40c80381ce283f64603cac08d3a69ceea91e257c17282f66ceddc�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","a189963ff252f547fddfc394c81f6e9d49eac403c32154eebe06f4cddb5a2a22�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","4416b8c36cb9d7cc261ff6612e105463eb2ccd4681930ca8e277a6387cb98794�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","090f2c5abb85a7b115dc25ae070153e4e958ae4e1bc2310226c05cd3e9429446�","ee1e5b80a1d3d47c7703ea2b6b64ee96283ab3628ee4fa1fef6d35d1d9051e9f�","3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567","6904d382bc045eb9a4899a403a8ba8a417d9ccb764f6e0b462bc0232d3b7e7ea�","71fb25cc4c05ce9dd94614ed781d85a50dccf69042521abc6782d48df85e6de9","856dfa74e0f3b5b7d6f79491a94560dbf3eacacc4a8d8a3238696fa38a4883ea�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","5d881d14d2336273e531b1b3d6f2d907539fe8489cbe80533280c9c72efa2273","10c129e2310342a55df5fa88331f338452835790a379d5230ee8de7d5f28ea1a�","781c63cf4981fa6aff002188307b278fac9785ca66f0b6dfcf68adbe7512e491�","aa29a8af8d615b1dd9f52fd49d42563fbeafa35ff0ab1b4afc4cb2b2fa54a119�","0ac5030e2171914f43e0769cb10b602683ccc9da09369bcd4b80da6edb8be80e�","0e96cf6166b7cc279f99d6977ab0f45e9f47e827b8a24d6665ac4c29e18b5ce0�","77270e13d01b2318a3f27a9a477b8386f1a0ebc6d44a2c7e185cfbe55aac8017","e7ff6a7ac5bfb0bb29547d413591abc7628c7d5576a3b43f6d8e5d95769e553a�","dedbc21afc768d749405de535f9b415baaf96f7664ded55d54829a425fc61d7e�","378d220bc863a527c2bca204daba36f10358e058df49ef088f8b1045604d9d05�","edeacd49aff3cfea35d593e455f7caca35ac877ad6dc19054458d41021e0e13a�","9c27405cf926d36ed8e247c17e6743ac00912789efe0c530914d7495de1e21ec�","9a8847168fa869331faf08db71690f24e567c5cdf1f01cc5e2a8d08c93d282c9��")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("db03a34684feab7475862080f59d4d99b32c74d3a152a53b257fd1a443e8ee77�","e99f3517a36a9f7a55335699cfb4d84d08b042d47146119156f7f3bab580b4d7�","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","97e093f2e0bf6dec8392618722dd6b4411088fe752bedece910d11fffe0288a2","f9c69e79e7799df31d6516df70148d7832b121d330beebe52cff6606f0724c62�","d9471b038c44619739176381815bfa9a13b5ff77021007a4ede9b146ed2e04ec�","d98cd810d568f338f16c4637e8a9cb01ff69ee1967f4cfc004de3f283d61ba81�","47d66c576393a4256d94f5ed1e77adc28426dea027f7a23e2dbf41b93b87bd78","60c4b6c230a40c80381ce283f64603cac08d3a69ceea91e257c17282f66ceddc�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","a189963ff252f547fddfc394c81f6e9d49eac403c32154eebe06f4cddb5a2a22�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","4416b8c36cb9d7cc261ff6612e105463eb2ccd4681930ca8e277a6387cb98794�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","090f2c5abb85a7b115dc25ae070153e4e958ae4e1bc2310226c05cd3e9429446�","ee1e5b80a1d3d47c7703ea2b6b64ee96283ab3628ee4fa1fef6d35d1d9051e9f�","3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567","6904d382bc045eb9a4899a403a8ba8a417d9ccb764f6e0b462bc0232d3b7e7ea�","71fb25cc4c05ce9dd94614ed781d85a50dccf69042521abc6782d48df85e6de9","856dfa74e0f3b5b7d6f79491a94560dbf3eacacc4a8d8a3238696fa38a4883ea�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","5d881d14d2336273e531b1b3d6f2d907539fe8489cbe80533280c9c72efa2273","10c129e2310342a55df5fa88331f338452835790a379d5230ee8de7d5f28ea1a�","781c63cf4981fa6aff002188307b278fac9785ca66f0b6dfcf68adbe7512e491�","aa29a8af8d615b1dd9f52fd49d42563fbeafa35ff0ab1b4afc4cb2b2fa54a119�","0ac5030e2171914f43e0769cb10b602683ccc9da09369bcd4b80da6edb8be80e�","0e96cf6166b7cc279f99d6977ab0f45e9f47e827b8a24d6665ac4c29e18b5ce0�","77270e13d01b2318a3f27a9a477b8386f1a0ebc6d44a2c7e185cfbe55aac8017","e7ff6a7ac5bfb0bb29547d413591abc7628c7d5576a3b43f6d8e5d95769e553a�","dedbc21afc768d749405de535f9b415baaf96f7664ded55d54829a425fc61d7e�","378d220bc863a527c2bca204daba36f10358e058df49ef088f8b1045604d9d05�","edeacd49aff3cfea35d593e455f7caca35ac877ad6dc19054458d41021e0e13a�","9c27405cf926d36ed8e247c17e6743ac00912789efe0c530914d7495de1e21ec�","9a8847168fa869331faf08db71690f24e567c5cdf1f01cc5e2a8d08c93d282c9��")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("db03a34684feab7475862080f59d4d99b32c74d3a152a53b257fd1a443e8ee77�","e99f3517a36a9f7a55335699cfb4d84d08b042d47146119156f7f3bab580b4d7�","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","97e093f2e0bf6dec8392618722dd6b4411088fe752bedece910d11fffe0288a2","f9c69e79e7799df31d6516df70148d7832b121d330beebe52cff6606f0724c62�","d9471b038c44619739176381815bfa9a13b5ff77021007a4ede9b146ed2e04ec�","d98cd810d568f338f16c4637e8a9cb01ff69ee1967f4cfc004de3f283d61ba81�","47d66c576393a4256d94f5ed1e77adc28426dea027f7a23e2dbf41b93b87bd78","60c4b6c230a40c80381ce283f64603cac08d3a69ceea91e257c17282f66ceddc�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","a189963ff252f547fddfc394c81f6e9d49eac403c32154eebe06f4cddb5a2a22�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","4416b8c36cb9d7cc261ff6612e105463eb2ccd4681930ca8e277a6387cb98794�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","090f2c5abb85a7b115dc25ae070153e4e958ae4e1bc2310226c05cd3e9429446�","ee1e5b80a1d3d47c7703ea2b6b64ee96283ab3628ee4fa1fef6d35d1d9051e9f�","3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567","6904d382bc045eb9a4899a403a8ba8a417d9ccb764f6e0b462bc0232d3b7e7ea�","71fb25cc4c05ce9dd94614ed781d85a50dccf69042521abc6782d48df85e6de9","856dfa74e0f3b5b7d6f79491a94560dbf3eacacc4a8d8a3238696fa38a4883ea�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","5d881d14d2336273e531b1b3d6f2d907539fe8489cbe80533280c9c72efa2273","10c129e2310342a55df5fa88331f338452835790a379d5230ee8de7d5f28ea1a�","781c63cf4981fa6aff002188307b278fac9785ca66f0b6dfcf68adbe7512e491�","aa29a8af8d615b1dd9f52fd49d42563fbeafa35ff0ab1b4afc4cb2b2fa54a119�","0ac5030e2171914f43e0769cb10b602683ccc9da09369bcd4b80da6edb8be80e�","0e96cf6166b7cc279f99d6977ab0f45e9f47e827b8a24d6665ac4c29e18b5ce0�","77270e13d01b2318a3f27a9a477b8386f1a0ebc6d44a2c7e185cfbe55aac8017","e7ff6a7ac5bfb0bb29547d413591abc7628c7d5576a3b43f6d8e5d95769e553a�","dedbc21afc768d749405de535f9b415baaf96f7664ded55d54829a425fc61d7e�","378d220bc863a527c2bca204daba36f10358e058df49ef088f8b1045604d9d05�","edeacd49aff3cfea35d593e455f7caca35ac877ad6dc19054458d41021e0e13a�","9c27405cf926d36ed8e247c17e6743ac00912789efe0c530914d7495de1e21ec�","9a8847168fa869331faf08db71690f24e567c5cdf1f01cc5e2a8d08c93d282c9��")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("db03a34684feab7475862080f59d4d99b32c74d3a152a53b257fd1a443e8ee77�","e99f3517a36a9f7a55335699cfb4d84d08b042d47146119156f7f3bab580b4d7�","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","97e093f2e0bf6dec8392618722dd6b4411088fe752bedece910d11fffe0288a2","f9c69e79e7799df31d6516df70148d7832b121d330beebe52cff6606f0724c62�","d9471b038c44619739176381815bfa9a13b5ff77021007a4ede9b146ed2e04ec�","d98cd810d568f338f16c4637e8a9cb01ff69ee1967f4cfc004de3f283d61ba81�","47d66c576393a4256d94f5ed1e77adc28426dea027f7a23e2dbf41b93b87bd78","60c4b6c230a40c80381ce283f64603cac08d3a69ceea91e257c17282f66ceddc�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","a189963ff252f547fddfc394c81f6e9d49eac403c32154eebe06f4cddb5a2a22�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","4416b8c36cb9d7cc261ff6612e105463eb2ccd4681930ca8e277a6387cb98794�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","090f2c5abb85a7b115dc25ae070153e4e958ae4e1bc2310226c05cd3e9429446�","ee1e5b80a1d3d47c7703ea2b6b64ee96283ab3628ee4fa1fef6d35d1d9051e9f�","3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567","6904d382bc045eb9a4899a403a8ba8a417d9ccb764f6e0b462bc0232d3b7e7ea�","71fb25cc4c05ce9dd94614ed781d85a50dccf69042521abc6782d48df85e6de9","856dfa74e0f3b5b7d6f79491a94560dbf3eacacc4a8d8a3238696fa38a4883ea�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","5d881d14d2336273e531b1b3d6f2d907539fe8489cbe80533280c9c72efa2273","10c129e2310342a55df5fa88331f338452835790a379d5230ee8de7d5f28ea1a�","781c63cf4981fa6aff002188307b278fac9785ca66f0b6dfcf68adbe7512e491�","aa29a8af8d615b1dd9f52fd49d42563fbeafa35ff0ab1b4afc4cb2b2fa54a119�","0ac5030e2171914f43e0769cb10b602683ccc9da09369bcd4b80da6edb8be80e�","0e96cf6166b7cc279f99d6977ab0f45e9f47e827b8a24d6665ac4c29e18b5ce0�","77270e13d01b2318a3f27a9a477b8386f1a0ebc6d44a2c7e185cfbe55aac8017","e7ff6a7ac5bfb0bb29547d413591abc7628c7d5576a3b43f6d8e5d95769e553a�","dedbc21afc768d749405de535f9b415baaf96f7664ded55d54829a425fc61d7e�","378d220bc863a527c2bca204daba36f10358e058df49ef088f8b1045604d9d05�","edeacd49aff3cfea35d593e455f7caca35ac877ad6dc19054458d41021e0e13a�","9c27405cf926d36ed8e247c17e6743ac00912789efe0c530914d7495de1e21ec�","9a8847168fa869331faf08db71690f24e567c5cdf1f01cc5e2a8d08c93d282c9��")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("db03a34684feab7475862080f59d4d99b32c74d3a152a53b257fd1a443e8ee77�","e99f3517a36a9f7a55335699cfb4d84d08b042d47146119156f7f3bab580b4d7�","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","97e093f2e0bf6dec8392618722dd6b4411088fe752bedece910d11fffe0288a2","f9c69e79e7799df31d6516df70148d7832b121d330beebe52cff6606f0724c62�","d9471b038c44619739176381815bfa9a13b5ff77021007a4ede9b146ed2e04ec�","d98cd810d568f338f16c4637e8a9cb01ff69ee1967f4cfc004de3f283d61ba81�","47d66c576393a4256d94f5ed1e77adc28426dea027f7a23e2dbf41b93b87bd78","60c4b6c230a40c80381ce283f64603cac08d3a69ceea91e257c17282f66ceddc�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","a189963ff252f547fddfc394c81f6e9d49eac403c32154eebe06f4cddb5a2a22�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","4416b8c36cb9d7cc261ff6612e105463eb2ccd4681930ca8e277a6387cb98794�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","090f2c5abb85a7b115dc25ae070153e4e958ae4e1bc2310226c05cd3e9429446�","ee1e5b80a1d3d47c7703ea2b6b64ee96283ab3628ee4fa1fef6d35d1d9051e9f�","3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567","6904d382bc045eb9a4899a403a8ba8a417d9ccb764f6e0b462bc0232d3b7e7ea�","71fb25cc4c05ce9dd94614ed781d85a50dccf69042521abc6782d48df85e6de9","856dfa74e0f3b5b7d6f79491a94560dbf3eacacc4a8d8a3238696fa38a4883ea�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","5d881d14d2336273e531b1b3d6f2d907539fe8489cbe80533280c9c72efa2273","10c129e2310342a55df5fa88331f338452835790a379d5230ee8de7d5f28ea1a�","781c63cf4981fa6aff002188307b278fac9785ca66f0b6dfcf68adbe7512e491�","aa29a8af8d615b1dd9f52fd49d42563fbeafa35ff0ab1b4afc4cb2b2fa54a119�","0ac5030e2171914f43e0769cb10b602683ccc9da09369bcd4b80da6edb8be80e�","0e96cf6166b7cc279f99d6977ab0f45e9f47e827b8a24d6665ac4c29e18b5ce0�","77270e13d01b2318a3f27a9a477b8386f1a0ebc6d44a2c7e185cfbe55aac8017","e7ff6a7ac5bfb0bb29547d413591abc7628c7d5576a3b43f6d8e5d95769e553a�","dedbc21afc768d749405de535f9b415baaf96f7664ded55d54829a425fc61d7e�","378d220bc863a527c2bca204daba36f10358e058df49ef088f8b1045604d9d05�","edeacd49aff3cfea35d593e455f7caca35ac877ad6dc19054458d41021e0e13a�","9c27405cf926d36ed8e247c17e6743ac00912789efe0c530914d7495de1e21ec�","9a8847168fa869331faf08db71690f24e567c5cdf1f01cc5e2a8d08c93d282c9��")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("db03a34684feab7475862080f59d4d99b32c74d3a152a53b257fd1a443e8ee77�","e99f3517a36a9f7a55335699cfb4d84d08b042d47146119156f7f3bab580b4d7�","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","97e093f2e0bf6dec8392618722dd6b4411088fe752bedece910d11fffe0288a2","f9c69e79e7799df31d6516df70148d7832b121d330beebe52cff6606f0724c62�","d9471b038c44619739176381815bfa9a13b5ff77021007a4ede9b146ed2e04ec�","d98cd810d568f338f16c4637e8a9cb01ff69ee1967f4cfc004de3f283d61ba81�","47d66c576393a4256d94f5ed1e77adc28426dea027f7a23e2dbf41b93b87bd78","60c4b6c230a40c80381ce283f64603cac08d3a69ceea91e257c17282f66ceddc�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","a189963ff252f547fddfc394c81f6e9d49eac403c32154eebe06f4cddb5a2a22�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","4416b8c36cb9d7cc261ff6612e105463eb2ccd4681930ca8e277a6387cb98794�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","090f2c5abb85a7b115dc25ae070153e4e958ae4e1bc2310226c05cd3e9429446�","ee1e5b80a1d3d47c7703ea2b6b64ee96283ab3628ee4fa1fef6d35d1d9051e9f�","3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567","6904d382bc045eb9a4899a403a8ba8a417d9ccb764f6e0b462bc0232d3b7e7ea�","71fb25cc4c05ce9dd94614ed781d85a50dccf69042521abc6782d48df85e6de9","856dfa74e0f3b5b7d6f79491a94560dbf3eacacc4a8d8a3238696fa38a4883ea�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","5d881d14d2336273e531b1b3d6f2d907539fe8489cbe80533280c9c72efa2273","10c129e2310342a55df5fa88331f338452835790a379d5230ee8de7d5f28ea1a�","781c63cf4981fa6aff002188307b278fac9785ca66f0b6dfcf68adbe7512e491�","aa29a8af8d615b1dd9f52fd49d42563fbeafa35ff0ab1b4afc4cb2b2fa54a119�","0ac5030e2171914f43e0769cb10b602683ccc9da09369bcd4b80da6edb8be80e�","0e96cf6166b7cc279f99d6977ab0f45e9f47e827b8a24d6665ac4c29e18b5ce0�","77270e13d01b2318a3f27a9a477b8386f1a0ebc6d44a2c7e185cfbe55aac8017","e7ff6a7ac5bfb0bb29547d413591abc7628c7d5576a3b43f6d8e5d95769e553a�","dedbc21afc768d749405de535f9b415baaf96f7664ded55d54829a425fc61d7e�","378d220bc863a527c2bca204daba36f10358e058df49ef088f8b1045604d9d05�","edeacd49aff3cfea35d593e455f7caca35ac877ad6dc19054458d41021e0e13a�","9c27405cf926d36ed8e247c17e6743ac00912789efe0c530914d7495de1e21ec�","9a8847168fa869331faf08db71690f24e567c5cdf1f01cc5e2a8d08c93d282c9��")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("db03a34684feab7475862080f59d4d99b32c74d3a152a53b257fd1a443e8ee77�","e99f3517a36a9f7a55335699cfb4d84d08b042d47146119156f7f3bab580b4d7�","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","97e093f2e0bf6dec8392618722dd6b4411088fe752bedece910d11fffe0288a2","f9c69e79e7799df31d6516df70148d7832b121d330beebe52cff6606f0724c62�","d9471b038c44619739176381815bfa9a13b5ff77021007a4ede9b146ed2e04ec�","d98cd810d568f338f16c4637e8a9cb01ff69ee1967f4cfc004de3f283d61ba81�","47d66c576393a4256d94f5ed1e77adc28426dea027f7a23e2dbf41b93b87bd78","60c4b6c230a40c80381ce283f64603cac08d3a69ceea91e257c17282f66ceddc�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","a189963ff252f547fddfc394c81f6e9d49eac403c32154eebe06f4cddb5a2a22�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","4416b8c36cb9d7cc261ff6612e105463eb2ccd4681930ca8e277a6387cb98794�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","090f2c5abb85a7b115dc25ae070153e4e958ae4e1bc2310226c05cd3e9429446�","ee1e5b80a1d3d47c7703ea2b6b64ee96283ab3628ee4fa1fef6d35d1d9051e9f�","3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567","6904d382bc045eb9a4899a403a8ba8a417d9ccb764f6e0b462bc0232d3b7e7ea�","71fb25cc4c05ce9dd94614ed781d85a50dccf69042521abc6782d48df85e6de9","856dfa74e0f3b5b7d6f79491a94560dbf3eacacc4a8d8a3238696fa38a4883ea�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","5d881d14d2336273e531b1b3d6f2d907539fe8489cbe80533280c9c72efa2273","10c129e2310342a55df5fa88331f338452835790a379d5230ee8de7d5f28ea1a�","781c63cf4981fa6aff002188307b278fac9785ca66f0b6dfcf68adbe7512e491�","aa29a8af8d615b1dd9f52fd49d42563fbeafa35ff0ab1b4afc4cb2b2fa54a119�","0ac5030e2171914f43e0769cb10b602683ccc9da09369bcd4b80da6edb8be80e�","0e96cf6166b7cc279f99d6977ab0f45e9f47e827b8a24d6665ac4c29e18b5ce0�","77270e13d01b2318a3f27a9a477b8386f1a0ebc6d44a2c7e185cfbe55aac8017","e7ff6a7ac5bfb0bb29547d413591abc7628c7d5576a3b43f6d8e5d95769e553a�","dedbc21afc768d749405de535f9b415baaf96f7664ded55d54829a425fc61d7e�","378d220bc863a527c2bca204daba36f10358e058df49ef088f8b1045604d9d05�","edeacd49aff3cfea35d593e455f7caca35ac877ad6dc19054458d41021e0e13a�","9c27405cf926d36ed8e247c17e6743ac00912789efe0c530914d7495de1e21ec�","9a8847168fa869331faf08db71690f24e567c5cdf1f01cc5e2a8d08c93d282c9��")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("db03a34684feab7475862080f59d4d99b32c74d3a152a53b257fd1a443e8ee77�","e99f3517a36a9f7a55335699cfb4d84d08b042d47146119156f7f3bab580b4d7�","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","97e093f2e0bf6dec8392618722dd6b4411088fe752bedece910d11fffe0288a2","f9c69e79e7799df31d6516df70148d7832b121d330beebe52cff6606f0724c62�","d9471b038c44619739176381815bfa9a13b5ff77021007a4ede9b146ed2e04ec�","d98cd810d568f338f16c4637e8a9cb01ff69ee1967f4cfc004de3f283d61ba81�","47d66c576393a4256d94f5ed1e77adc28426dea027f7a23e2dbf41b93b87bd78","60c4b6c230a40c80381ce283f64603cac08d3a69ceea91e257c17282f66ceddc�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","a189963ff252f547fddfc394c81f6e9d49eac403c32154eebe06f4cddb5a2a22�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","4416b8c36cb9d7cc261ff6612e105463eb2ccd4681930ca8e277a6387cb98794�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","090f2c5abb85a7b115dc25ae070153e4e958ae4e1bc2310226c05cd3e9429446�","ee1e5b80a1d3d47c7703ea2b6b64ee96283ab3628ee4fa1fef6d35d1d9051e9f�","3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567","6904d382bc045eb9a4899a403a8ba8a417d9ccb764f6e0b462bc0232d3b7e7ea�","71fb25cc4c05ce9dd94614ed781d85a50dccf69042521abc6782d48df85e6de9","856dfa74e0f3b5b7d6f79491a94560dbf3eacacc4a8d8a3238696fa38a4883ea�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","5d881d14d2336273e531b1b3d6f2d907539fe8489cbe80533280c9c72efa2273","10c129e2310342a55df5fa88331f338452835790a379d5230ee8de7d5f28ea1a�","781c63cf4981fa6aff002188307b278fac9785ca66f0b6dfcf68adbe7512e491�","aa29a8af8d615b1dd9f52fd49d42563fbeafa35ff0ab1b4afc4cb2b2fa54a119�","0ac5030e2171914f43e0769cb10b602683ccc9da09369bcd4b80da6edb8be80e�","0e96cf6166b7cc279f99d6977ab0f45e9f47e827b8a24d6665ac4c29e18b5ce0�","77270e13d01b2318a3f27a9a477b8386f1a0ebc6d44a2c7e185cfbe55aac8017","e7ff6a7ac5bfb0bb29547d413591abc7628c7d5576a3b43f6d8e5d95769e553a�","dedbc21afc768d749405de535f9b415baaf96f7664ded55d54829a425fc61d7e�","378d220bc863a527c2bca204daba36f10358e058df49ef088f8b1045604d9d05�","edeacd49aff3cfea35d593e455f7caca35ac877ad6dc19054458d41021e0e13a�","9c27405cf926d36ed8e247c17e6743ac00912789efe0c530914d7495de1e21ec�","9a8847168fa869331faf08db71690f24e567c5cdf1f01cc5e2a8d08c93d282c9��")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("db03a34684feab7475862080f59d4d99b32c74d3a152a53b257fd1a443e8ee77�","e99f3517a36a9f7a55335699cfb4d84d08b042d47146119156f7f3bab580b4d7�","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","97e093f2e0bf6dec8392618722dd6b4411088fe752bedece910d11fffe0288a2","f9c69e79e7799df31d6516df70148d7832b121d330beebe52cff6606f0724c62�","d9471b038c44619739176381815bfa9a13b5ff77021007a4ede9b146ed2e04ec�","d98cd810d568f338f16c4637e8a9cb01ff69ee1967f4cfc004de3f283d61ba81�","47d66c576393a4256d94f5ed1e77adc28426dea027f7a23e2dbf41b93b87bd78","60c4b6c230a40c80381ce283f64603cac08d3a69ceea91e257c17282f66ceddc�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","a189963ff252f547fddfc394c81f6e9d49eac403c32154eebe06f4cddb5a2a22�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","4416b8c36cb9d7cc261ff6612e105463eb2ccd4681930ca8e277a6387cb98794�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","090f2c5abb85a7b115dc25ae070153e4e958ae4e1bc2310226c05cd3e9429446�","ee1e5b80a1d3d47c7703ea2b6b64ee96283ab3628ee4fa1fef6d35d1d9051e9f�","3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567","6904d382bc045eb9a4899a403a8ba8a417d9ccb764f6e0b462bc0232d3b7e7ea�","71fb25cc4c05ce9dd94614ed781d85a50dccf69042521abc6782d48df85e6de9","856dfa74e0f3b5b7d6f79491a94560dbf3eacacc4a8d8a3238696fa38a4883ea�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","5d881d14d2336273e531b1b3d6f2d907539fe8489cbe80533280c9c72efa2273","10c129e2310342a55df5fa88331f338452835790a379d5230ee8de7d5f28ea1a�","781c63cf4981fa6aff002188307b278fac9785ca66f0b6dfcf68adbe7512e491�","aa29a8af8d615b1dd9f52fd49d42563fbeafa35ff0ab1b4afc4cb2b2fa54a119�","0ac5030e2171914f43e0769cb10b602683ccc9da09369bcd4b80da6edb8be80e�","0e96cf6166b7cc279f99d6977ab0f45e9f47e827b8a24d6665ac4c29e18b5ce0�","77270e13d01b2318a3f27a9a477b8386f1a0ebc6d44a2c7e185cfbe55aac8017","e7ff6a7ac5bfb0bb29547d413591abc7628c7d5576a3b43f6d8e5d95769e553a�","dedbc21afc768d749405de535f9b415baaf96f7664ded55d54829a425fc61d7e�","378d220bc863a527c2bca204daba36f10358e058df49ef088f8b1045604d9d05�","edeacd49aff3cfea35d593e455f7caca35ac877ad6dc19054458d41021e0e13a�","9c27405cf926d36ed8e247c17e6743ac00912789efe0c530914d7495de1e21ec�","9a8847168fa869331faf08db71690f24e567c5cdf1f01cc5e2a8d08c93d282c9��")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("db03a34684feab7475862080f59d4d99b32c74d3a152a53b257fd1a443e8ee77�","e99f3517a36a9f7a55335699cfb4d84d08b042d47146119156f7f3bab580b4d7�","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","97e093f2e0bf6dec8392618722dd6b4411088fe752bedece910d11fffe0288a2","f9c69e79e7799df31d6516df70148d7832b121d330beebe52cff6606f0724c62�","d9471b038c44619739176381815bfa9a13b5ff77021007a4ede9b146ed2e04ec�","d98cd810d568f338f16c4637e8a9cb01ff69ee1967f4cfc004de3f283d61ba81�","47d66c576393a4256d94f5ed1e77adc28426dea027f7a23e2dbf41b93b87bd78","60c4b6c230a40c80381ce283f64603cac08d3a69ceea91e257c17282f66ceddc�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","a189963ff252f547fddfc394c81f6e9d49eac403c32154eebe06f4cddb5a2a22�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","4416b8c36cb9d7cc261ff6612e105463eb2ccd4681930ca8e277a6387cb98794�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","090f2c5abb85a7b115dc25ae070153e4e958ae4e1bc2310226c05cd3e9429446�","ee1e5b80a1d3d47c7703ea2b6b64ee96283ab3628ee4fa1fef6d35d1d9051e9f�","3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567","6904d382bc045eb9a4899a403a8ba8a417d9ccb764f6e0b462bc0232d3b7e7ea�","71fb25cc4c05ce9dd94614ed781d85a50dccf69042521abc6782d48df85e6de9","856dfa74e0f3b5b7d6f79491a94560dbf3eacacc4a8d8a3238696fa38a4883ea�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","5d881d14d2336273e531b1b3d6f2d907539fe8489cbe80533280c9c72efa2273","10c129e2310342a55df5fa88331f338452835790a379d5230ee8de7d5f28ea1a�","781c63cf4981fa6aff002188307b278fac9785ca66f0b6dfcf68adbe7512e491�","aa29a8af8d615b1dd9f52fd49d42563fbeafa35ff0ab1b4afc4cb2b2fa54a119�","0ac5030e2171914f43e0769cb10b602683ccc9da09369bcd4b80da6edb8be80e�","0e96cf6166b7cc279f99d6977ab0f45e9f47e827b8a24d6665ac4c29e18b5ce0�","77270e13d01b2318a3f27a9a477b8386f1a0ebc6d44a2c7e185cfbe55aac8017","e7ff6a7ac5bfb0bb29547d413591abc7628c7d5576a3b43f6d8e5d95769e553a�","dedbc21afc768d749405de535f9b415baaf96f7664ded55d54829a425fc61d7e�","378d220bc863a527c2bca204daba36f10358e058df49ef088f8b1045604d9d05�","edeacd49aff3cfea35d593e455f7caca35ac877ad6dc19054458d41021e0e13a�","9c27405cf926d36ed8e247c17e6743ac00912789efe0c530914d7495de1e21ec�","9a8847168fa869331faf08db71690f24e567c5cdf1f01cc5e2a8d08c93d282c9��")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("db03a34684feab7475862080f59d4d99b32c74d3a152a53b257fd1a443e8ee77�","e99f3517a36a9f7a55335699cfb4d84d08b042d47146119156f7f3bab580b4d7�","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","97e093f2e0bf6dec8392618722dd6b4411088fe752bedece910d11fffe0288a2","f9c69e79e7799df31d6516df70148d7832b121d330beebe52cff6606f0724c62�","d9471b038c44619739176381815bfa9a13b5ff77021007a4ede9b146ed2e04ec�","d98cd810d568f338f16c4637e8a9cb01ff69ee1967f4cfc004de3f283d61ba81�","47d66c576393a4256d94f5ed1e77adc28426dea027f7a23e2dbf41b93b87bd78","60c4b6c230a40c80381ce283f64603cac08d3a69ceea91e257c17282f66ceddc�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","a189963ff252f547fddfc394c81f6e9d49eac403c32154eebe06f4cddb5a2a22�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","4416b8c36cb9d7cc261ff6612e105463eb2ccd4681930ca8e277a6387cb98794�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","090f2c5abb85a7b115dc25ae070153e4e958ae4e1bc2310226c05cd3e9429446�","ee1e5b80a1d3d47c7703ea2b6b64ee96283ab3628ee4fa1fef6d35d1d9051e9f�","3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567","6904d382bc045eb9a4899a403a8ba8a417d9ccb764f6e0b462bc0232d3b7e7ea�","71fb25cc4c05ce9dd94614ed781d85a50dccf69042521abc6782d48df85e6de9","856dfa74e0f3b5b7d6f79491a94560dbf3eacacc4a8d8a3238696fa38a4883ea�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","5d881d14d2336273e531b1b3d6f2d907539fe8489cbe80533280c9c72efa2273","10c129e2310342a55df5fa88331f338452835790a379d5230ee8de7d5f28ea1a�","781c63cf4981fa6aff002188307b278fac9785ca66f0b6dfcf68adbe7512e491�","aa29a8af8d615b1dd9f52fd49d42563fbeafa35ff0ab1b4afc4cb2b2fa54a119�","0ac5030e2171914f43e0769cb10b602683ccc9da09369bcd4b80da6edb8be80e�","0e96cf6166b7cc279f99d6977ab0f45e9f47e827b8a24d6665ac4c29e18b5ce0�","77270e13d01b2318a3f27a9a477b8386f1a0ebc6d44a2c7e185cfbe55aac8017","e7ff6a7ac5bfb0bb29547d413591abc7628c7d5576a3b43f6d8e5d95769e553a�","dedbc21afc768d749405de535f9b415baaf96f7664ded55d54829a425fc61d7e�","378d220bc863a527c2bca204daba36f10358e058df49ef088f8b1045604d9d05�","edeacd49aff3cfea35d593e455f7caca35ac877ad6dc19054458d41021e0e13a�","9c27405cf926d36ed8e247c17e6743ac00912789efe0c530914d7495de1e21ec�","9a8847168fa869331faf08db71690f24e567c5cdf1f01cc5e2a8d08c93d282c9��")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("db03a34684feab7475862080f59d4d99b32c74d3a152a53b257fd1a443e8ee77�","e99f3517a36a9f7a55335699cfb4d84d08b042d47146119156f7f3bab580b4d7�","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","97e093f2e0bf6dec8392618722dd6b4411088fe752bedece910d11fffe0288a2","f9c69e79e7799df31d6516df70148d7832b121d330beebe52cff6606f0724c62�","d9471b038c44619739176381815bfa9a13b5ff77021007a4ede9b146ed2e04ec�","d98cd810d568f338f16c4637e8a9cb01ff69ee1967f4cfc004de3f283d61ba81�","47d66c576393a4256d94f5ed1e77adc28426dea027f7a23e2dbf41b93b87bd78","60c4b6c230a40c80381ce283f64603cac08d3a69ceea91e257c17282f66ceddc�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","a189963ff252f547fddfc394c81f6e9d49eac403c32154eebe06f4cddb5a2a22�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","4416b8c36cb9d7cc261ff6612e105463eb2ccd4681930ca8e277a6387cb98794�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","090f2c5abb85a7b115dc25ae070153e4e958ae4e1bc2310226c05cd3e9429446�","ee1e5b80a1d3d47c7703ea2b6b64ee96283ab3628ee4fa1fef6d35d1d9051e9f�","3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567","6904d382bc045eb9a4899a403a8ba8a417d9ccb764f6e0b462bc0232d3b7e7ea�","71fb25cc4c05ce9dd94614ed781d85a50dccf69042521abc6782d48df85e6de9","856dfa74e0f3b5b7d6f79491a94560dbf3eacacc4a8d8a3238696fa38a4883ea�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","5d881d14d2336273e531b1b3d6f2d907539fe8489cbe80533280c9c72efa2273","10c129e2310342a55df5fa88331f338452835790a379d5230ee8de7d5f28ea1a�","781c63cf4981fa6aff002188307b278fac9785ca66f0b6dfcf68adbe7512e491�","aa29a8af8d615b1dd9f52fd49d42563fbeafa35ff0ab1b4afc4cb2b2fa54a119�","0ac5030e2171914f43e0769cb10b602683ccc9da09369bcd4b80da6edb8be80e�","0e96cf6166b7cc279f99d6977ab0f45e9f47e827b8a24d6665ac4c29e18b5ce0�","77270e13d01b2318a3f27a9a477b8386f1a0ebc6d44a2c7e185cfbe55aac8017","e7ff6a7ac5bfb0bb29547d413591abc7628c7d5576a3b43f6d8e5d95769e553a�","dedbc21afc768d749405de535f9b415baaf96f7664ded55d54829a425fc61d7e�","378d220bc863a527c2bca204daba36f10358e058df49ef088f8b1045604d9d05�","edeacd49aff3cfea35d593e455f7caca35ac877ad6dc19054458d41021e0e13a�","9c27405cf926d36ed8e247c17e6743ac00912789efe0c530914d7495de1e21ec�","9a8847168fa869331faf08db71690f24e567c5cdf1f01cc5e2a8d08c93d282c9��")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("db03a34684feab7475862080f59d4d99b32c74d3a152a53b257fd1a443e8ee77�","e99f3517a36a9f7a55335699cfb4d84d08b042d47146119156f7f3bab580b4d7�","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","97e093f2e0bf6dec8392618722dd6b4411088fe752bedece910d11fffe0288a2","f9c69e79e7799df31d6516df70148d7832b121d330beebe52cff6606f0724c62�","d9471b038c44619739176381815bfa9a13b5ff77021007a4ede9b146ed2e04ec�","d98cd810d568f338f16c4637e8a9cb01ff69ee1967f4cfc004de3f283d61ba81�","47d66c576393a4256d94f5ed1e77adc28426dea027f7a23e2dbf41b93b87bd78","60c4b6c230a40c80381ce283f64603cac08d3a69ceea91e257c17282f66ceddc�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","a189963ff252f547fddfc394c81f6e9d49eac403c32154eebe06f4cddb5a2a22�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","4416b8c36cb9d7cc261ff6612e105463eb2ccd4681930ca8e277a6387cb98794�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","090f2c5abb85a7b115dc25ae070153e4e958ae4e1bc2310226c05cd3e9429446�","ee1e5b80a1d3d47c7703ea2b6b64ee96283ab3628ee4fa1fef6d35d1d9051e9f�","3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567","6904d382bc045eb9a4899a403a8ba8a417d9ccb764f6e0b462bc0232d3b7e7ea�","71fb25cc4c05ce9dd94614ed781d85a50dccf69042521abc6782d48df85e6de9","856dfa74e0f3b5b7d6f79491a94560dbf3eacacc4a8d8a3238696fa38a4883ea�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","5d881d14d2336273e531b1b3d6f2d907539fe8489cbe80533280c9c72efa2273","10c129e2310342a55df5fa88331f338452835790a379d5230ee8de7d5f28ea1a�","781c63cf4981fa6aff002188307b278fac9785ca66f0b6dfcf68adbe7512e491�","aa29a8af8d615b1dd9f52fd49d42563fbeafa35ff0ab1b4afc4cb2b2fa54a119�","0ac5030e2171914f43e0769cb10b602683ccc9da09369bcd4b80da6edb8be80e�","0e96cf6166b7cc279f99d6977ab0f45e9f47e827b8a24d6665ac4c29e18b5ce0�","77270e13d01b2318a3f27a9a477b8386f1a0ebc6d44a2c7e185cfbe55aac8017","e7ff6a7ac5bfb0bb29547d413591abc7628c7d5576a3b43f6d8e5d95769e553a�","dedbc21afc768d749405de535f9b415baaf96f7664ded55d54829a425fc61d7e�","378d220bc863a527c2bca204daba36f10358e058df49ef088f8b1045604d9d05�","edeacd49aff3cfea35d593e455f7caca35ac877ad6dc19054458d41021e0e13a�","9c27405cf926d36ed8e247c17e6743ac00912789efe0c530914d7495de1e21ec�","9a8847168fa869331faf08db71690f24e567c5cdf1f01cc5e2a8d08c93d282c9��")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("db03a34684feab7475862080f59d4d99b32c74d3a152a53b257fd1a443e8ee77�","e99f3517a36a9f7a55335699cfb4d84d08b042d47146119156f7f3bab580b4d7�","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","97e093f2e0bf6dec8392618722dd6b4411088fe752bedece910d11fffe0288a2","f9c69e79e7799df31d6516df70148d7832b121d330beebe52cff6606f0724c62�","d9471b038c44619739176381815bfa9a13b5ff77021007a4ede9b146ed2e04ec�","d98cd810d568f338f16c4637e8a9cb01ff69ee1967f4cfc004de3f283d61ba81�","47d66c576393a4256d94f5ed1e77adc28426dea027f7a23e2dbf41b93b87bd78","60c4b6c230a40c80381ce283f64603cac08d3a69ceea91e257c17282f66ceddc�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","a189963ff252f547fddfc394c81f6e9d49eac403c32154eebe06f4cddb5a2a22�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","4416b8c36cb9d7cc261ff6612e105463eb2ccd4681930ca8e277a6387cb98794�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","090f2c5abb85a7b115dc25ae070153e4e958ae4e1bc2310226c05cd3e9429446�","ee1e5b80a1d3d47c7703ea2b6b64ee96283ab3628ee4fa1fef6d35d1d9051e9f�","3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567","6904d382bc045eb9a4899a403a8ba8a417d9ccb764f6e0b462bc0232d3b7e7ea�","71fb25cc4c05ce9dd94614ed781d85a50dccf69042521abc6782d48df85e6de9","856dfa74e0f3b5b7d6f79491a94560dbf3eacacc4a8d8a3238696fa38a4883ea�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","5d881d14d2336273e531b1b3d6f2d907539fe8489cbe80533280c9c72efa2273","10c129e2310342a55df5fa88331f338452835790a379d5230ee8de7d5f28ea1a�","781c63cf4981fa6aff002188307b278fac9785ca66f0b6dfcf68adbe7512e491�","aa29a8af8d615b1dd9f52fd49d42563fbeafa35ff0ab1b4afc4cb2b2fa54a119�","0ac5030e2171914f43e0769cb10b602683ccc9da09369bcd4b80da6edb8be80e�","0e96cf6166b7cc279f99d6977ab0f45e9f47e827b8a24d6665ac4c29e18b5ce0�","77270e13d01b2318a3f27a9a477b8386f1a0ebc6d44a2c7e185cfbe55aac8017","e7ff6a7ac5bfb0bb29547d413591abc7628c7d5576a3b43f6d8e5d95769e553a�","dedbc21afc768d749405de535f9b415baaf96f7664ded55d54829a425fc61d7e�","378d220bc863a527c2bca204daba36f10358e058df49ef088f8b1045604d9d05�","edeacd49aff3cfea35d593e455f7caca35ac877ad6dc19054458d41021e0e13a�","9c27405cf926d36ed8e247c17e6743ac00912789efe0c530914d7495de1e21ec�","9a8847168fa869331faf08db71690f24e567c5cdf1f01cc5e2a8d08c93d282c9��")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("db03a34684feab7475862080f59d4d99b32c74d3a152a53b257fd1a443e8ee77�","e99f3517a36a9f7a55335699cfb4d84d08b042d47146119156f7f3bab580b4d7�","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","97e093f2e0bf6dec8392618722dd6b4411088fe752bedece910d11fffe0288a2","f9c69e79e7799df31d6516df70148d7832b121d330beebe52cff6606f0724c62�","d9471b038c44619739176381815bfa9a13b5ff77021007a4ede9b146ed2e04ec�","d98cd810d568f338f16c4637e8a9cb01ff69ee1967f4cfc004de3f283d61ba81�","47d66c576393a4256d94f5ed1e77adc28426dea027f7a23e2dbf41b93b87bd78","60c4b6c230a40c80381ce283f64603cac08d3a69ceea91e257c17282f66ceddc�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","a189963ff252f547fddfc394c81f6e9d49eac403c32154eebe06f4cddb5a2a22�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","4416b8c36cb9d7cc261ff6612e105463eb2ccd4681930ca8e277a6387cb98794�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","090f2c5abb85a7b115dc25ae070153e4e958ae4e1bc2310226c05cd3e9429446�","ee1e5b80a1d3d47c7703ea2b6b64ee96283ab3628ee4fa1fef6d35d1d9051e9f�","3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567","6904d382bc045eb9a4899a403a8ba8a417d9ccb764f6e0b462bc0232d3b7e7ea�","71fb25cc4c05ce9dd94614ed781d85a50dccf69042521abc6782d48df85e6de9","856dfa74e0f3b5b7d6f79491a94560dbf3eacacc4a8d8a3238696fa38a4883ea�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","5d881d14d2336273e531b1b3d6f2d907539fe8489cbe80533280c9c72efa2273","10c129e2310342a55df5fa88331f338452835790a379d5230ee8de7d5f28ea1a�","781c63cf4981fa6aff002188307b278fac9785ca66f0b6dfcf68adbe7512e491�","aa29a8af8d615b1dd9f52fd49d42563fbeafa35ff0ab1b4afc4cb2b2fa54a119�","0ac5030e2171914f43e0769cb10b602683ccc9da09369bcd4b80da6edb8be80e�","0e96cf6166b7cc279f99d6977ab0f45e9f47e827b8a24d6665ac4c29e18b5ce0�","77270e13d01b2318a3f27a9a477b8386f1a0ebc6d44a2c7e185cfbe55aac8017","e7ff6a7ac5bfb0bb29547d413591abc7628c7d5576a3b43f6d8e5d95769e553a�","dedbc21afc768d749405de535f9b415baaf96f7664ded55d54829a425fc61d7e�","378d220bc863a527c2bca204daba36f10358e058df49ef088f8b1045604d9d05�","edeacd49aff3cfea35d593e455f7caca35ac877ad6dc19054458d41021e0e13a�","9c27405cf926d36ed8e247c17e6743ac00912789efe0c530914d7495de1e21ec�","9a8847168fa869331faf08db71690f24e567c5cdf1f01cc5e2a8d08c93d282c9��")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("db03a34684feab7475862080f59d4d99b32c74d3a152a53b257fd1a443e8ee77�","e99f3517a36a9f7a55335699cfb4d84d08b042d47146119156f7f3bab580b4d7�","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","97e093f2e0bf6dec8392618722dd6b4411088fe752bedece910d11fffe0288a2","f9c69e79e7799df31d6516df70148d7832b121d330beebe52cff6606f0724c62�","d9471b038c44619739176381815bfa9a13b5ff77021007a4ede9b146ed2e04ec�","d98cd810d568f338f16c4637e8a9cb01ff69ee1967f4cfc004de3f283d61ba81�","47d66c576393a4256d94f5ed1e77adc28426dea027f7a23e2dbf41b93b87bd78","60c4b6c230a40c80381ce283f64603cac08d3a69ceea91e257c17282f66ceddc�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","a189963ff252f547fddfc394c81f6e9d49eac403c32154eebe06f4cddb5a2a22�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","4416b8c36cb9d7cc261ff6612e105463eb2ccd4681930ca8e277a6387cb98794�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","090f2c5abb85a7b115dc25ae070153e4e958ae4e1bc2310226c05cd3e9429446�","ee1e5b80a1d3d47c7703ea2b6b64ee96283ab3628ee4fa1fef6d35d1d9051e9f�","3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567","6904d382bc045eb9a4899a403a8ba8a417d9ccb764f6e0b462bc0232d3b7e7ea�","71fb25cc4c05ce9dd94614ed781d85a50dccf69042521abc6782d48df85e6de9","856dfa74e0f3b5b7d6f79491a94560dbf3eacacc4a8d8a3238696fa38a4883ea�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","5d881d14d2336273e531b1b3d6f2d907539fe8489cbe80533280c9c72efa2273","10c129e2310342a55df5fa88331f338452835790a379d5230ee8de7d5f28ea1a�","781c63cf4981fa6aff002188307b278fac9785ca66f0b6dfcf68adbe7512e491�","aa29a8af8d615b1dd9f52fd49d42563fbeafa35ff0ab1b4afc4cb2b2fa54a119�","0ac5030e2171914f43e0769cb10b602683ccc9da09369bcd4b80da6edb8be80e�","0e96cf6166b7cc279f99d6977ab0f45e9f47e827b8a24d6665ac4c29e18b5ce0�","77270e13d01b2318a3f27a9a477b8386f1a0ebc6d44a2c7e185cfbe55aac8017","e7ff6a7ac5bfb0bb29547d413591abc7628c7d5576a3b43f6d8e5d95769e553a�","dedbc21afc768d749405de535f9b415baaf96f7664ded55d54829a425fc61d7e�","378d220bc863a527c2bca204daba36f10358e058df49ef088f8b1045604d9d05�","edeacd49aff3cfea35d593e455f7caca35ac877ad6dc19054458d41021e0e13a�","9c27405cf926d36ed8e247c17e6743ac00912789efe0c530914d7495de1e21ec�","9a8847168fa869331faf08db71690f24e567c5cdf1f01cc5e2a8d08c93d282c9��")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("db03a34684feab7475862080f59d4d99b32c74d3a152a53b257fd1a443e8ee77�","e99f3517a36a9f7a55335699cfb4d84d08b042d47146119156f7f3bab580b4d7�","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","97e093f2e0bf6dec8392618722dd6b4411088fe752bedece910d11fffe0288a2","f9c69e79e7799df31d6516df70148d7832b121d330beebe52cff6606f0724c62�","d9471b038c44619739176381815bfa9a13b5ff77021007a4ede9b146ed2e04ec�","d98cd810d568f338f16c4637e8a9cb01ff69ee1967f4cfc004de3f283d61ba81�","47d66c576393a4256d94f5ed1e77adc28426dea027f7a23e2dbf41b93b87bd78","60c4b6c230a40c80381ce283f64603cac08d3a69ceea91e257c17282f66ceddc�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","a189963ff252f547fddfc394c81f6e9d49eac403c32154eebe06f4cddb5a2a22�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","4416b8c36cb9d7cc261ff6612e105463eb2ccd4681930ca8e277a6387cb98794�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","090f2c5abb85a7b115dc25ae070153e4e958ae4e1bc2310226c05cd3e9429446�","ee1e5b80a1d3d47c7703ea2b6b64ee96283ab3628ee4fa1fef6d35d1d9051e9f�","3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567","6904d382bc045eb9a4899a403a8ba8a417d9ccb764f6e0b462bc0232d3b7e7ea�","71fb25cc4c05ce9dd94614ed781d85a50dccf69042521abc6782d48df85e6de9","856dfa74e0f3b5b7d6f79491a94560dbf3eacacc4a8d8a3238696fa38a4883ea�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","5d881d14d2336273e531b1b3d6f2d907539fe8489cbe80533280c9c72efa2273","10c129e2310342a55df5fa88331f338452835790a379d5230ee8de7d5f28ea1a�","781c63cf4981fa6aff002188307b278fac9785ca66f0b6dfcf68adbe7512e491�","aa29a8af8d615b1dd9f52fd49d42563fbeafa35ff0ab1b4afc4cb2b2fa54a119�","0ac5030e2171914f43e0769cb10b602683ccc9da09369bcd4b80da6edb8be80e�","0e96cf6166b7cc279f99d6977ab0f45e9f47e827b8a24d6665ac4c29e18b5ce0�","77270e13d01b2318a3f27a9a477b8386f1a0ebc6d44a2c7e185cfbe55aac8017","e7ff6a7ac5bfb0bb29547d413591abc7628c7d5576a3b43f6d8e5d95769e553a�","dedbc21afc768d749405de535f9b415baaf96f7664ded55d54829a425fc61d7e�","378d220bc863a527c2bca204daba36f10358e058df49ef088f8b1045604d9d05�","edeacd49aff3cfea35d593e455f7caca35ac877ad6dc19054458d41021e0e13a�","9c27405cf926d36ed8e247c17e6743ac00912789efe0c530914d7495de1e21ec�","9a8847168fa869331faf08db71690f24e567c5cdf1f01cc5e2a8d08c93d282c9��")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("db03a34684feab7475862080f59d4d99b32c74d3a152a53b257fd1a443e8ee77�","e99f3517a36a9f7a55335699cfb4d84d08b042d47146119156f7f3bab580b4d7�","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","97e093f2e0bf6dec8392618722dd6b4411088fe752bedece910d11fffe0288a2","f9c69e79e7799df31d6516df70148d7832b121d330beebe52cff6606f0724c62�","d9471b038c44619739176381815bfa9a13b5ff77021007a4ede9b146ed2e04ec�","d98cd810d568f338f16c4637e8a9cb01ff69ee1967f4cfc004de3f283d61ba81�","47d66c576393a4256d94f5ed1e77adc28426dea027f7a23e2dbf41b93b87bd78","60c4b6c230a40c80381ce283f64603cac08d3a69ceea91e257c17282f66ceddc�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","a189963ff252f547fddfc394c81f6e9d49eac403c32154eebe06f4cddb5a2a22�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","4416b8c36cb9d7cc261ff6612e105463eb2ccd4681930ca8e277a6387cb98794�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","090f2c5abb85a7b115dc25ae070153e4e958ae4e1bc2310226c05cd3e9429446�","ee1e5b80a1d3d47c7703ea2b6b64ee96283ab3628ee4fa1fef6d35d1d9051e9f�","3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567","6904d382bc045eb9a4899a403a8ba8a417d9ccb764f6e0b462bc0232d3b7e7ea�","71fb25cc4c05ce9dd94614ed781d85a50dccf69042521abc6782d48df85e6de9","856dfa74e0f3b5b7d6f79491a94560dbf3eacacc4a8d8a3238696fa38a4883ea�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","5d881d14d2336273e531b1b3d6f2d907539fe8489cbe80533280c9c72efa2273","10c129e2310342a55df5fa88331f338452835790a379d5230ee8de7d5f28ea1a�","781c63cf4981fa6aff002188307b278fac9785ca66f0b6dfcf68adbe7512e491�","aa29a8af8d615b1dd9f52fd49d42563fbeafa35ff0ab1b4afc4cb2b2fa54a119�","0ac5030e2171914f43e0769cb10b602683ccc9da09369bcd4b80da6edb8be80e�","0e96cf6166b7cc279f99d6977ab0f45e9f47e827b8a24d6665ac4c29e18b5ce0�","77270e13d01b2318a3f27a9a477b8386f1a0ebc6d44a2c7e185cfbe55aac8017","e7ff6a7ac5bfb0bb29547d413591abc7628c7d5576a3b43f6d8e5d95769e553a�","dedbc21afc768d749405de535f9b415baaf96f7664ded55d54829a425fc61d7e�","378d220bc863a527c2bca204daba36f10358e058df49ef088f8b1045604d9d05�","edeacd49aff3cfea35d593e455f7caca35ac877ad6dc19054458d41021e0e13a�","9c27405cf926d36ed8e247c17e6743ac00912789efe0c530914d7495de1e21ec�","9a8847168fa869331faf08db71690f24e567c5cdf1f01cc5e2a8d08c93d282c9��")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("db03a34684feab7475862080f59d4d99b32c74d3a152a53b257fd1a443e8ee77�","e99f3517a36a9f7a55335699cfb4d84d08b042d47146119156f7f3bab580b4d7�","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","97e093f2e0bf6dec8392618722dd6b4411088fe752bedece910d11fffe0288a2","f9c69e79e7799df31d6516df70148d7832b121d330beebe52cff6606f0724c62�","d9471b038c44619739176381815bfa9a13b5ff77021007a4ede9b146ed2e04ec�","d98cd810d568f338f16c4637e8a9cb01ff69ee1967f4cfc004de3f283d61ba81�","47d66c576393a4256d94f5ed1e77adc28426dea027f7a23e2dbf41b93b87bd78","60c4b6c230a40c80381ce283f64603cac08d3a69ceea91e257c17282f66ceddc�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","a189963ff252f547fddfc394c81f6e9d49eac403c32154eebe06f4cddb5a2a22�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","4416b8c36cb9d7cc261ff6612e105463eb2ccd4681930ca8e277a6387cb98794�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","090f2c5abb85a7b115dc25ae070153e4e958ae4e1bc2310226c05cd3e9429446�","ee1e5b80a1d3d47c7703ea2b6b64ee96283ab3628ee4fa1fef6d35d1d9051e9f�","3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567","6904d382bc045eb9a4899a403a8ba8a417d9ccb764f6e0b462bc0232d3b7e7ea�","71fb25cc4c05ce9dd94614ed781d85a50dccf69042521abc6782d48df85e6de9","856dfa74e0f3b5b7d6f79491a94560dbf3eacacc4a8d8a3238696fa38a4883ea�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","5d881d14d2336273e531b1b3d6f2d907539fe8489cbe80533280c9c72efa2273","10c129e2310342a55df5fa88331f338452835790a379d5230ee8de7d5f28ea1a�","781c63cf4981fa6aff002188307b278fac9785ca66f0b6dfcf68adbe7512e491�","aa29a8af8d615b1dd9f52fd49d42563fbeafa35ff0ab1b4afc4cb2b2fa54a119�","0ac5030e2171914f43e0769cb10b602683ccc9da09369bcd4b80da6edb8be80e�","0e96cf6166b7cc279f99d6977ab0f45e9f47e827b8a24d6665ac4c29e18b5ce0�","77270e13d01b2318a3f27a9a477b8386f1a0ebc6d44a2c7e185cfbe55aac8017","e7ff6a7ac5bfb0bb29547d413591abc7628c7d5576a3b43f6d8e5d95769e553a�","dedbc21afc768d749405de535f9b415baaf96f7664ded55d54829a425fc61d7e�","378d220bc863a527c2bca204daba36f10358e058df49ef088f8b1045604d9d05�","edeacd49aff3cfea35d593e455f7caca35ac877ad6dc19054458d41021e0e13a�","9c27405cf926d36ed8e247c17e6743ac00912789efe0c530914d7495de1e21ec�","9a8847168fa869331faf08db71690f24e567c5cdf1f01cc5e2a8d08c93d282c9��")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("db03a34684feab7475862080f59d4d99b32c74d3a152a53b257fd1a443e8ee77�","e99f3517a36a9f7a55335699cfb4d84d08b042d47146119156f7f3bab580b4d7�","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","97e093f2e0bf6dec8392618722dd6b4411088fe752bedece910d11fffe0288a2","f9c69e79e7799df31d6516df70148d7832b121d330beebe52cff6606f0724c62�","d9471b038c44619739176381815bfa9a13b5ff77021007a4ede9b146ed2e04ec�","d98cd810d568f338f16c4637e8a9cb01ff69ee1967f4cfc004de3f283d61ba81�","47d66c576393a4256d94f5ed1e77adc28426dea027f7a23e2dbf41b93b87bd78","60c4b6c230a40c80381ce283f64603cac08d3a69ceea91e257c17282f66ceddc�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","a189963ff252f547fddfc394c81f6e9d49eac403c32154eebe06f4cddb5a2a22�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","4416b8c36cb9d7cc261ff6612e105463eb2ccd4681930ca8e277a6387cb98794�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","090f2c5abb85a7b115dc25ae070153e4e958ae4e1bc2310226c05cd3e9429446�","ee1e5b80a1d3d47c7703ea2b6b64ee96283ab3628ee4fa1fef6d35d1d9051e9f�","3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567","6904d382bc045eb9a4899a403a8ba8a417d9ccb764f6e0b462bc0232d3b7e7ea�","71fb25cc4c05ce9dd94614ed781d85a50dccf69042521abc6782d48df85e6de9","856dfa74e0f3b5b7d6f79491a94560dbf3eacacc4a8d8a3238696fa38a4883ea�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","5d881d14d2336273e531b1b3d6f2d907539fe8489cbe80533280c9c72efa2273","10c129e2310342a55df5fa88331f338452835790a379d5230ee8de7d5f28ea1a�","781c63cf4981fa6aff002188307b278fac9785ca66f0b6dfcf68adbe7512e491�","aa29a8af8d615b1dd9f52fd49d42563fbeafa35ff0ab1b4afc4cb2b2fa54a119�","0ac5030e2171914f43e0769cb10b602683ccc9da09369bcd4b80da6edb8be80e�","0e96cf6166b7cc279f99d6977ab0f45e9f47e827b8a24d6665ac4c29e18b5ce0�","77270e13d01b2318a3f27a9a477b8386f1a0ebc6d44a2c7e185cfbe55aac8017","e7ff6a7ac5bfb0bb29547d413591abc7628c7d5576a3b43f6d8e5d95769e553a�","dedbc21afc768d749405de535f9b415baaf96f7664ded55d54829a425fc61d7e�","378d220bc863a527c2bca204daba36f10358e058df49ef088f8b1045604d9d05�","edeacd49aff3cfea35d593e455f7caca35ac877ad6dc19054458d41021e0e13a�","9c27405cf926d36ed8e247c17e6743ac00912789efe0c530914d7495de1e21ec�","9a8847168fa869331faf08db71690f24e567c5cdf1f01cc5e2a8d08c93d282c9��")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("db03a34684feab7475862080f59d4d99b32c74d3a152a53b257fd1a443e8ee77�","e99f3517a36a9f7a55335699cfb4d84d08b042d47146119156f7f3bab580b4d7�","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","97e093f2e0bf6dec8392618722dd6b4411088fe752bedece910d11fffe0288a2","f9c69e79e7799df31d6516df70148d7832b121d330beebe52cff6606f0724c62�","d9471b038c44619739176381815bfa9a13b5ff77021007a4ede9b146ed2e04ec�","d98cd810d568f338f16c4637e8a9cb01ff69ee1967f4cfc004de3f283d61ba81�","47d66c576393a4256d94f5ed1e77adc28426dea027f7a23e2dbf41b93b87bd78","60c4b6c230a40c80381ce283f64603cac08d3a69ceea91e257c17282f66ceddc�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","a189963ff252f547fddfc394c81f6e9d49eac403c32154eebe06f4cddb5a2a22�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","4416b8c36cb9d7cc261ff6612e105463eb2ccd4681930ca8e277a6387cb98794�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","090f2c5abb85a7b115dc25ae070153e4e958ae4e1bc2310226c05cd3e9429446�","ee1e5b80a1d3d47c7703ea2b6b64ee96283ab3628ee4fa1fef6d35d1d9051e9f�","3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567","6904d382bc045eb9a4899a403a8ba8a417d9ccb764f6e0b462bc0232d3b7e7ea�","71fb25cc4c05ce9dd94614ed781d85a50dccf69042521abc6782d48df85e6de9","856dfa74e0f3b5b7d6f79491a94560dbf3eacacc4a8d8a3238696fa38a4883ea�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","5d881d14d2336273e531b1b3d6f2d907539fe8489cbe80533280c9c72efa2273","10c129e2310342a55df5fa88331f338452835790a379d5230ee8de7d5f28ea1a�","781c63cf4981fa6aff002188307b278fac9785ca66f0b6dfcf68adbe7512e491�","aa29a8af8d615b1dd9f52fd49d42563fbeafa35ff0ab1b4afc4cb2b2fa54a119�","0ac5030e2171914f43e0769cb10b602683ccc9da09369bcd4b80da6edb8be80e�","0e96cf6166b7cc279f99d6977ab0f45e9f47e827b8a24d6665ac4c29e18b5ce0�","77270e13d01b2318a3f27a9a477b8386f1a0ebc6d44a2c7e185cfbe55aac8017","e7ff6a7ac5bfb0bb29547d413591abc7628c7d5576a3b43f6d8e5d95769e553a�","dedbc21afc768d749405de535f9b415baaf96f7664ded55d54829a425fc61d7e�","378d220bc863a527c2bca204daba36f10358e058df49ef088f8b1045604d9d05�","edeacd49aff3cfea35d593e455f7caca35ac877ad6dc19054458d41021e0e13a�","9c27405cf926d36ed8e247c17e6743ac00912789efe0c530914d7495de1e21ec�","9a8847168fa869331faf08db71690f24e567c5cdf1f01cc5e2a8d08c93d282c9��")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("db03a34684feab7475862080f59d4d99b32c74d3a152a53b257fd1a443e8ee77�","e99f3517a36a9f7a55335699cfb4d84d08b042d47146119156f7f3bab580b4d7�","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","97e093f2e0bf6dec8392618722dd6b4411088fe752bedece910d11fffe0288a2","f9c69e79e7799df31d6516df70148d7832b121d330beebe52cff6606f0724c62�","d9471b038c44619739176381815bfa9a13b5ff77021007a4ede9b146ed2e04ec�","d98cd810d568f338f16c4637e8a9cb01ff69ee1967f4cfc004de3f283d61ba81�","47d66c576393a4256d94f5ed1e77adc28426dea027f7a23e2dbf41b93b87bd78","60c4b6c230a40c80381ce283f64603cac08d3a69ceea91e257c17282f66ceddc�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","a189963ff252f547fddfc394c81f6e9d49eac403c32154eebe06f4cddb5a2a22�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","4416b8c36cb9d7cc261ff6612e105463eb2ccd4681930ca8e277a6387cb98794�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","090f2c5abb85a7b115dc25ae070153e4e958ae4e1bc2310226c05cd3e9429446�","ee1e5b80a1d3d47c7703ea2b6b64ee96283ab3628ee4fa1fef6d35d1d9051e9f�","3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567","6904d382bc045eb9a4899a403a8ba8a417d9ccb764f6e0b462bc0232d3b7e7ea�","71fb25cc4c05ce9dd94614ed781d85a50dccf69042521abc6782d48df85e6de9","856dfa74e0f3b5b7d6f79491a94560dbf3eacacc4a8d8a3238696fa38a4883ea�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","5d881d14d2336273e531b1b3d6f2d907539fe8489cbe80533280c9c72efa2273","10c129e2310342a55df5fa88331f338452835790a379d5230ee8de7d5f28ea1a�","781c63cf4981fa6aff002188307b278fac9785ca66f0b6dfcf68adbe7512e491�","aa29a8af8d615b1dd9f52fd49d42563fbeafa35ff0ab1b4afc4cb2b2fa54a119�","0ac5030e2171914f43e0769cb10b602683ccc9da09369bcd4b80da6edb8be80e�","0e96cf6166b7cc279f99d6977ab0f45e9f47e827b8a24d6665ac4c29e18b5ce0�","77270e13d01b2318a3f27a9a477b8386f1a0ebc6d44a2c7e185cfbe55aac8017","e7ff6a7ac5bfb0bb29547d413591abc7628c7d5576a3b43f6d8e5d95769e553a�","dedbc21afc768d749405de535f9b415baaf96f7664ded55d54829a425fc61d7e�","378d220bc863a527c2bca204daba36f10358e058df49ef088f8b1045604d9d05�","edeacd49aff3cfea35d593e455f7caca35ac877ad6dc19054458d41021e0e13a�","9c27405cf926d36ed8e247c17e6743ac00912789efe0c530914d7495de1e21ec�","9a8847168fa869331faf08db71690f24e567c5cdf1f01cc5e2a8d08c93d282c9��")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("db03a34684feab7475862080f59d4d99b32c74d3a152a53b257fd1a443e8ee77�","e99f3517a36a9f7a55335699cfb4d84d08b042d47146119156f7f3bab580b4d7�","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","97e093f2e0bf6dec8392618722dd6b4411088fe752bedece910d11fffe0288a2","f9c69e79e7799df31d6516df70148d7832b121d330beebe52cff6606f0724c62�","d9471b038c44619739176381815bfa9a13b5ff77021007a4ede9b146ed2e04ec�","d98cd810d568f338f16c4637e8a9cb01ff69ee1967f4cfc004de3f283d61ba81�","47d66c576393a4256d94f5ed1e77adc28426dea027f7a23e2dbf41b93b87bd78","60c4b6c230a40c80381ce283f64603cac08d3a69ceea91e257c17282f66ceddc�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","a189963ff252f547fddfc394c81f6e9d49eac403c32154eebe06f4cddb5a2a22�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","4416b8c36cb9d7cc261ff6612e105463eb2ccd4681930ca8e277a6387cb98794�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","090f2c5abb85a7b115dc25ae070153e4e958ae4e1bc2310226c05cd3e9429446�","ee1e5b80a1d3d47c7703ea2b6b64ee96283ab3628ee4fa1fef6d35d1d9051e9f�","3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567","6904d382bc045eb9a4899a403a8ba8a417d9ccb764f6e0b462bc0232d3b7e7ea�","71fb25cc4c05ce9dd94614ed781d85a50dccf69042521abc6782d48df85e6de9","856dfa74e0f3b5b7d6f79491a94560dbf3eacacc4a8d8a3238696fa38a4883ea�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","5d881d14d2336273e531b1b3d6f2d907539fe8489cbe80533280c9c72efa2273","10c129e2310342a55df5fa88331f338452835790a379d5230ee8de7d5f28ea1a�","781c63cf4981fa6aff002188307b278fac9785ca66f0b6dfcf68adbe7512e491�","aa29a8af8d615b1dd9f52fd49d42563fbeafa35ff0ab1b4afc4cb2b2fa54a119�","0ac5030e2171914f43e0769cb10b602683ccc9da09369bcd4b80da6edb8be80e�","0e96cf6166b7cc279f99d6977ab0f45e9f47e827b8a24d6665ac4c29e18b5ce0�","77270e13d01b2318a3f27a9a477b8386f1a0ebc6d44a2c7e185cfbe55aac8017","e7ff6a7ac5bfb0bb29547d413591abc7628c7d5576a3b43f6d8e5d95769e553a�","dedbc21afc768d749405de535f9b415baaf96f7664ded55d54829a425fc61d7e�","378d220bc863a527c2bca204daba36f10358e058df49ef088f8b1045604d9d05�","edeacd49aff3cfea35d593e455f7caca35ac877ad6dc19054458d41021e0e13a�","9c27405cf926d36ed8e247c17e6743ac00912789efe0c530914d7495de1e21ec�","9a8847168fa869331faf08db71690f24e567c5cdf1f01cc5e2a8d08c93d282c9��")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("db03a34684feab7475862080f59d4d99b32c74d3a152a53b257fd1a443e8ee77�","e99f3517a36a9f7a55335699cfb4d84d08b042d47146119156f7f3bab580b4d7�","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","97e093f2e0bf6dec8392618722dd6b4411088fe752bedece910d11fffe0288a2","f9c69e79e7799df31d6516df70148d7832b121d330beebe52cff6606f0724c62�","d9471b038c44619739176381815bfa9a13b5ff77021007a4ede9b146ed2e04ec�","d98cd810d568f338f16c4637e8a9cb01ff69ee1967f4cfc004de3f283d61ba81�","47d66c576393a4256d94f5ed1e77adc28426dea027f7a23e2dbf41b93b87bd78","60c4b6c230a40c80381ce283f64603cac08d3a69ceea91e257c17282f66ceddc�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","a189963ff252f547fddfc394c81f6e9d49eac403c32154eebe06f4cddb5a2a22�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","4416b8c36cb9d7cc261ff6612e105463eb2ccd4681930ca8e277a6387cb98794�","aee22a35cbdac3f16c3ed742c0b1bfe9739a13469cf43b36fb2c63565111028c","090f2c5abb85a7b115dc25ae070153e4e958ae4e1bc2310226c05cd3e9429446�","ee1e5b80a1d3d47c7703ea2b6b64ee96283ab3628ee4fa1fef6d35d1d9051e9f�","3b63ea8b6f9b2aa847faa11f6cd3eb281abd9b9cceedb570713c4d78a47de567","6904d382bc045eb9a4899a403a8ba8a417d9ccb764f6e0b462bc0232d3b7e7ea�","71fb25cc4c05ce9dd94614ed781d85a50dccf69042521abc6782d48df85e6de9","856dfa74e0f3b5b7d6f79491a94560dbf3eacacc4a8d8a3238696fa38a4883ea�","88573297f17589963706d9da6ced7893eacbdc7d6bc43780e4c509b88ccd2aef�","97e08d1c7970c1c12284c4644e2321ce41e40cdaac941e451db4d334cb9c5492","bb525dc6b7a7ebefd040e01fd48d7d4e178f8d9e5dec9033078ced4e9aa4e241�","5d881d14d2336273e531b1b3d6f2d907539fe8489cbe80533280c9c72efa2273","10c129e2310342a55df5fa88331f338452835790a379d5230ee8de7d5f28ea1a�","781c63cf4981fa6aff002188307b278fac9785ca66f0b6dfcf68adbe7512e491�","aa29a8af8d615b1dd9f52fd49d42563fbeafa35ff0ab1b4afc4cb2b2fa54a119�","0ac5030e2171914f43e0769cb10b602683ccc9da09369bcd4b80da6edb8be80e�","0e96cf6166b7cc279f99d6977ab0f45e9f47e827b8a24d6665ac4c29e18b5ce0�","77270e13d01b2318a3f27a9a477b8386f1a0ebc6d44a2c7e185cfbe55aac8017","e7ff6a7ac5bfb0bb29547d413591abc7628c7d5576a3b43f6d8e5d95769e553a�","dedbc21afc768d749405de535f9b415baaf96f7664ded55d54829a425fc61d7e�","378d220bc863a527c2bca204daba36f10358e058df49ef088f8b1045604d9d05�","edeacd49aff3cfea35d593e455f7caca35ac877ad6dc19054458d41021e0e13a�","9c27405cf926d36ed8e247c17e6743ac00912789efe0c530914d7495de1e21ec�","9a8847168fa869331faf08db71690f24e567c5cdf1f01cc5e2a8d08c93d282c9��")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("http://162.55.217.30/grms/0.6395541546258323.dat�","http://157.90.166.88/o3zlynw/0.7797109211833805.dat�","http://128.140.36.37/cqtdio/0.43650426987684443.dat","https://mazdakrichest.com/live/�","https://riverhasus.com/live/�","https://peermangoz.me/live/�","https://aprettopizza.world/live/�","https://nimeklroboti.info/live/�","https://frotneels.shop/live/�","https://arsimonopa.com/live�","https://lemonimonakio.com/live�","http://superior-coin.com/ga/index.php�","http://superior-coin.com/ga/m/6.dll�","https://fluraresto.me/live/�","https://mastralakkot.live/live/�","https://trasenanoyr.best/live/�","https://miistoria.com/live�","https://plwskoret.top/live�","http://178.23.190.199:80/share/gsm.msi�","https://sluitionsbad.tech/live/�","https://grebiunti.top/live/�","http://5.252.21.207@80/share/escape.msi�","http://5.252.21.207/share/escape.msi","https://jertacco.com/live/�","http://95.164.3.171/share/cisa.msi�","https://scifimond.com/live/�","https://aytobusesre.com/live/�","https://popfealt.one/live/�","https://ginzbargatey.tech/live/�","https://minndarespo.icu/live/�","https://drifajizo.fun/live/�","https://scifimond.com/live/�","https://minndarespo.icu/live/�","http://sokingscrosshotel.com/share/upd.msi�","https://titnovacrion.top/live/")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Endpoint Management Systems" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Endpoint Management Systems" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Cloud Content Management System" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Cloud Content Management System" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="77.91.73.187" AND destinationport=443� OR destinationaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="77.91.73.187" AND sourceport=443� OR sourceaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="77.91.73.187" AND sourceport=443� OR translatedipaddress="74.119.193.200" AND sourceport=443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationport=443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND destinationtranslatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="77.91.73.187" AND translatedport=443� OR destinationtranslatedaddress="74.119.193.200" AND translatedport=443)
