index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://easiercommunications.com/wp-content/w/" OR destinationhostname CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR destinationhostname CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR destinationhostname CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR destinationhostname CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR destinationhostname CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR destinationhostname CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR destinationhostname CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR destinationhostname CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR destinationhostname CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR destinationhostname CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR destinationhostname CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR destinationhostname CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR destinationhostname CONTAINS "http://gakudou.com/photo06/hEu/" OR destinationhostname CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR destinationhostname CONTAINS "http://plresende.com/pcinfor/cq/" OR destinationhostname CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR destinationhostname CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://easiercommunications.com/wp-content/w/" OR sourcentdomain CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR sourcentdomain CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR sourcentdomain CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR sourcentdomain CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR sourcentdomain CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR sourcentdomain CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR sourcentdomain CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR sourcentdomain CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR sourcentdomain CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR sourcentdomain CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR sourcentdomain CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR sourcentdomain CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR sourcentdomain CONTAINS "http://gakudou.com/photo06/hEu/" OR sourcentdomain CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR sourcentdomain CONTAINS "http://plresende.com/pcinfor/cq/" OR sourcentdomain CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR sourcentdomain CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://easiercommunications.com/wp-content/w/" OR sourcehostname CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR sourcehostname CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR sourcehostname CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR sourcehostname CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR sourcehostname CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR sourcehostname CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR sourcehostname CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR sourcehostname CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR sourcehostname CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR sourcehostname CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR sourcehostname CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR sourcehostname CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR sourcehostname CONTAINS "http://gakudou.com/photo06/hEu/" OR sourcehostname CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR sourcehostname CONTAINS "http://plresende.com/pcinfor/cq/" OR sourcehostname CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR sourcehostname CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://easiercommunications.com/wp-content/w/" OR destinationntdomain CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR destinationntdomain CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR destinationntdomain CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR destinationntdomain CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR destinationntdomain CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR destinationntdomain CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR destinationntdomain CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR destinationntdomain CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR destinationntdomain CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR destinationntdomain CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR destinationntdomain CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR destinationntdomain CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR destinationntdomain CONTAINS "http://gakudou.com/photo06/hEu/" OR destinationntdomain CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR destinationntdomain CONTAINS "http://plresende.com/pcinfor/cq/" OR destinationntdomain CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR destinationntdomain CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://easiercommunications.com/wp-content/w/" OR destinationhostname CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR destinationhostname CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR destinationhostname CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR destinationhostname CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR destinationhostname CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR destinationhostname CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR destinationhostname CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR destinationhostname CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR destinationhostname CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR destinationhostname CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR destinationhostname CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR destinationhostname CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR destinationhostname CONTAINS "http://gakudou.com/photo06/hEu/" OR destinationhostname CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR destinationhostname CONTAINS "http://plresende.com/pcinfor/cq/" OR destinationhostname CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR destinationhostname CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://easiercommunications.com/wp-content/w/" OR sourcentdomain CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR sourcentdomain CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR sourcentdomain CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR sourcentdomain CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR sourcentdomain CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR sourcentdomain CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR sourcentdomain CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR sourcentdomain CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR sourcentdomain CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR sourcentdomain CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR sourcentdomain CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR sourcentdomain CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR sourcentdomain CONTAINS "http://gakudou.com/photo06/hEu/" OR sourcentdomain CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR sourcentdomain CONTAINS "http://plresende.com/pcinfor/cq/" OR sourcentdomain CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR sourcentdomain CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://easiercommunications.com/wp-content/w/" OR sourcehostname CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR sourcehostname CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR sourcehostname CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR sourcehostname CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR sourcehostname CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR sourcehostname CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR sourcehostname CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR sourcehostname CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR sourcehostname CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR sourcehostname CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR sourcehostname CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR sourcehostname CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR sourcehostname CONTAINS "http://gakudou.com/photo06/hEu/" OR sourcehostname CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR sourcehostname CONTAINS "http://plresende.com/pcinfor/cq/" OR sourcehostname CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR sourcehostname CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://easiercommunications.com/wp-content/w/" OR destinationntdomain CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR destinationntdomain CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR destinationntdomain CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR destinationntdomain CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR destinationntdomain CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR destinationntdomain CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR destinationntdomain CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR destinationntdomain CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR destinationntdomain CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR destinationntdomain CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR destinationntdomain CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR destinationntdomain CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR destinationntdomain CONTAINS "http://gakudou.com/photo06/hEu/" OR destinationntdomain CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR destinationntdomain CONTAINS "http://plresende.com/pcinfor/cq/" OR destinationntdomain CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR destinationntdomain CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://easiercommunications.com/wp-content/w/" OR destinationhostname CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR destinationhostname CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR destinationhostname CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR destinationhostname CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR destinationhostname CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR destinationhostname CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR destinationhostname CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR destinationhostname CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR destinationhostname CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR destinationhostname CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR destinationhostname CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR destinationhostname CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR destinationhostname CONTAINS "http://gakudou.com/photo06/hEu/" OR destinationhostname CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR destinationhostname CONTAINS "http://plresende.com/pcinfor/cq/" OR destinationhostname CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR destinationhostname CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://easiercommunications.com/wp-content/w/" OR sourcentdomain CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR sourcentdomain CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR sourcentdomain CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR sourcentdomain CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR sourcentdomain CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR sourcentdomain CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR sourcentdomain CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR sourcentdomain CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR sourcentdomain CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR sourcentdomain CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR sourcentdomain CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR sourcentdomain CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR sourcentdomain CONTAINS "http://gakudou.com/photo06/hEu/" OR sourcentdomain CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR sourcentdomain CONTAINS "http://plresende.com/pcinfor/cq/" OR sourcentdomain CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR sourcentdomain CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://easiercommunications.com/wp-content/w/" OR sourcehostname CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR sourcehostname CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR sourcehostname CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR sourcehostname CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR sourcehostname CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR sourcehostname CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR sourcehostname CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR sourcehostname CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR sourcehostname CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR sourcehostname CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR sourcehostname CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR sourcehostname CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR sourcehostname CONTAINS "http://gakudou.com/photo06/hEu/" OR sourcehostname CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR sourcehostname CONTAINS "http://plresende.com/pcinfor/cq/" OR sourcehostname CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR sourcehostname CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://easiercommunications.com/wp-content/w/" OR destinationntdomain CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR destinationntdomain CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR destinationntdomain CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR destinationntdomain CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR destinationntdomain CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR destinationntdomain CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR destinationntdomain CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR destinationntdomain CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR destinationntdomain CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR destinationntdomain CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR destinationntdomain CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR destinationntdomain CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR destinationntdomain CONTAINS "http://gakudou.com/photo06/hEu/" OR destinationntdomain CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR destinationntdomain CONTAINS "http://plresende.com/pcinfor/cq/" OR destinationntdomain CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR destinationntdomain CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://easiercommunications.com/wp-content/w/" OR destinationhostname CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR destinationhostname CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR destinationhostname CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR destinationhostname CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR destinationhostname CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR destinationhostname CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR destinationhostname CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR destinationhostname CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR destinationhostname CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR destinationhostname CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR destinationhostname CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR destinationhostname CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR destinationhostname CONTAINS "http://gakudou.com/photo06/hEu/" OR destinationhostname CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR destinationhostname CONTAINS "http://plresende.com/pcinfor/cq/" OR destinationhostname CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR destinationhostname CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://easiercommunications.com/wp-content/w/" OR sourcentdomain CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR sourcentdomain CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR sourcentdomain CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR sourcentdomain CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR sourcentdomain CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR sourcentdomain CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR sourcentdomain CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR sourcentdomain CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR sourcentdomain CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR sourcentdomain CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR sourcentdomain CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR sourcentdomain CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR sourcentdomain CONTAINS "http://gakudou.com/photo06/hEu/" OR sourcentdomain CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR sourcentdomain CONTAINS "http://plresende.com/pcinfor/cq/" OR sourcentdomain CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR sourcentdomain CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://easiercommunications.com/wp-content/w/" OR sourcehostname CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR sourcehostname CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR sourcehostname CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR sourcehostname CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR sourcehostname CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR sourcehostname CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR sourcehostname CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR sourcehostname CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR sourcehostname CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR sourcehostname CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR sourcehostname CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR sourcehostname CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR sourcehostname CONTAINS "http://gakudou.com/photo06/hEu/" OR sourcehostname CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR sourcehostname CONTAINS "http://plresende.com/pcinfor/cq/" OR sourcehostname CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR sourcehostname CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://easiercommunications.com/wp-content/w/" OR destinationntdomain CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR destinationntdomain CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR destinationntdomain CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR destinationntdomain CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR destinationntdomain CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR destinationntdomain CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR destinationntdomain CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR destinationntdomain CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR destinationntdomain CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR destinationntdomain CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR destinationntdomain CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR destinationntdomain CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR destinationntdomain CONTAINS "http://gakudou.com/photo06/hEu/" OR destinationntdomain CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR destinationntdomain CONTAINS "http://plresende.com/pcinfor/cq/" OR destinationntdomain CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR destinationntdomain CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://easiercommunications.com/wp-content/w/" OR destinationhostname CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR destinationhostname CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR destinationhostname CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR destinationhostname CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR destinationhostname CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR destinationhostname CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR destinationhostname CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR destinationhostname CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR destinationhostname CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR destinationhostname CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR destinationhostname CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR destinationhostname CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR destinationhostname CONTAINS "http://gakudou.com/photo06/hEu/" OR destinationhostname CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR destinationhostname CONTAINS "http://plresende.com/pcinfor/cq/" OR destinationhostname CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR destinationhostname CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://easiercommunications.com/wp-content/w/" OR sourcentdomain CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR sourcentdomain CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR sourcentdomain CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR sourcentdomain CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR sourcentdomain CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR sourcentdomain CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR sourcentdomain CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR sourcentdomain CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR sourcentdomain CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR sourcentdomain CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR sourcentdomain CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR sourcentdomain CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR sourcentdomain CONTAINS "http://gakudou.com/photo06/hEu/" OR sourcentdomain CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR sourcentdomain CONTAINS "http://plresende.com/pcinfor/cq/" OR sourcentdomain CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR sourcentdomain CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://easiercommunications.com/wp-content/w/" OR sourcehostname CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR sourcehostname CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR sourcehostname CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR sourcehostname CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR sourcehostname CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR sourcehostname CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR sourcehostname CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR sourcehostname CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR sourcehostname CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR sourcehostname CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR sourcehostname CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR sourcehostname CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR sourcehostname CONTAINS "http://gakudou.com/photo06/hEu/" OR sourcehostname CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR sourcehostname CONTAINS "http://plresende.com/pcinfor/cq/" OR sourcehostname CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR sourcehostname CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://easiercommunications.com/wp-content/w/" OR destinationntdomain CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR destinationntdomain CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR destinationntdomain CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR destinationntdomain CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR destinationntdomain CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR destinationntdomain CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR destinationntdomain CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR destinationntdomain CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR destinationntdomain CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR destinationntdomain CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR destinationntdomain CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR destinationntdomain CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR destinationntdomain CONTAINS "http://gakudou.com/photo06/hEu/" OR destinationntdomain CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR destinationntdomain CONTAINS "http://plresende.com/pcinfor/cq/" OR destinationntdomain CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR destinationntdomain CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://easiercommunications.com/wp-content/w/" OR destinationhostname CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR destinationhostname CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR destinationhostname CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR destinationhostname CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR destinationhostname CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR destinationhostname CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR destinationhostname CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR destinationhostname CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR destinationhostname CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR destinationhostname CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR destinationhostname CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR destinationhostname CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR destinationhostname CONTAINS "http://gakudou.com/photo06/hEu/" OR destinationhostname CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR destinationhostname CONTAINS "http://plresende.com/pcinfor/cq/" OR destinationhostname CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR destinationhostname CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://easiercommunications.com/wp-content/w/" OR sourcentdomain CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR sourcentdomain CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR sourcentdomain CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR sourcentdomain CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR sourcentdomain CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR sourcentdomain CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR sourcentdomain CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR sourcentdomain CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR sourcentdomain CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR sourcentdomain CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR sourcentdomain CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR sourcentdomain CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR sourcentdomain CONTAINS "http://gakudou.com/photo06/hEu/" OR sourcentdomain CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR sourcentdomain CONTAINS "http://plresende.com/pcinfor/cq/" OR sourcentdomain CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR sourcentdomain CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://easiercommunications.com/wp-content/w/" OR sourcehostname CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR sourcehostname CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR sourcehostname CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR sourcehostname CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR sourcehostname CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR sourcehostname CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR sourcehostname CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR sourcehostname CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR sourcehostname CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR sourcehostname CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR sourcehostname CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR sourcehostname CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR sourcehostname CONTAINS "http://gakudou.com/photo06/hEu/" OR sourcehostname CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR sourcehostname CONTAINS "http://plresende.com/pcinfor/cq/" OR sourcehostname CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR sourcehostname CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://easiercommunications.com/wp-content/w/" OR destinationntdomain CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR destinationntdomain CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR destinationntdomain CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR destinationntdomain CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR destinationntdomain CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR destinationntdomain CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR destinationntdomain CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR destinationntdomain CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR destinationntdomain CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR destinationntdomain CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR destinationntdomain CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR destinationntdomain CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR destinationntdomain CONTAINS "http://gakudou.com/photo06/hEu/" OR destinationntdomain CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR destinationntdomain CONTAINS "http://plresende.com/pcinfor/cq/" OR destinationntdomain CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR destinationntdomain CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://easiercommunications.com/wp-content/w/" OR destinationhostname CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR destinationhostname CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR destinationhostname CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR destinationhostname CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR destinationhostname CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR destinationhostname CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR destinationhostname CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR destinationhostname CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR destinationhostname CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR destinationhostname CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR destinationhostname CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR destinationhostname CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR destinationhostname CONTAINS "http://gakudou.com/photo06/hEu/" OR destinationhostname CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR destinationhostname CONTAINS "http://plresende.com/pcinfor/cq/" OR destinationhostname CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR destinationhostname CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://easiercommunications.com/wp-content/w/" OR sourcentdomain CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR sourcentdomain CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR sourcentdomain CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR sourcentdomain CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR sourcentdomain CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR sourcentdomain CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR sourcentdomain CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR sourcentdomain CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR sourcentdomain CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR sourcentdomain CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR sourcentdomain CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR sourcentdomain CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR sourcentdomain CONTAINS "http://gakudou.com/photo06/hEu/" OR sourcentdomain CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR sourcentdomain CONTAINS "http://plresende.com/pcinfor/cq/" OR sourcentdomain CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR sourcentdomain CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://easiercommunications.com/wp-content/w/" OR sourcehostname CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR sourcehostname CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR sourcehostname CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR sourcehostname CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR sourcehostname CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR sourcehostname CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR sourcehostname CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR sourcehostname CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR sourcehostname CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR sourcehostname CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR sourcehostname CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR sourcehostname CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR sourcehostname CONTAINS "http://gakudou.com/photo06/hEu/" OR sourcehostname CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR sourcehostname CONTAINS "http://plresende.com/pcinfor/cq/" OR sourcehostname CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR sourcehostname CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://easiercommunications.com/wp-content/w/" OR destinationntdomain CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR destinationntdomain CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR destinationntdomain CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR destinationntdomain CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR destinationntdomain CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR destinationntdomain CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR destinationntdomain CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR destinationntdomain CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR destinationntdomain CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR destinationntdomain CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR destinationntdomain CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR destinationntdomain CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR destinationntdomain CONTAINS "http://gakudou.com/photo06/hEu/" OR destinationntdomain CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR destinationntdomain CONTAINS "http://plresende.com/pcinfor/cq/" OR destinationntdomain CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR destinationntdomain CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://easiercommunications.com/wp-content/w/" OR destinationhostname CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR destinationhostname CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR destinationhostname CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR destinationhostname CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR destinationhostname CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR destinationhostname CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR destinationhostname CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR destinationhostname CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR destinationhostname CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR destinationhostname CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR destinationhostname CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR destinationhostname CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR destinationhostname CONTAINS "http://gakudou.com/photo06/hEu/" OR destinationhostname CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR destinationhostname CONTAINS "http://plresende.com/pcinfor/cq/" OR destinationhostname CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR destinationhostname CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://easiercommunications.com/wp-content/w/" OR sourcentdomain CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR sourcentdomain CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR sourcentdomain CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR sourcentdomain CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR sourcentdomain CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR sourcentdomain CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR sourcentdomain CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR sourcentdomain CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR sourcentdomain CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR sourcentdomain CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR sourcentdomain CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR sourcentdomain CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR sourcentdomain CONTAINS "http://gakudou.com/photo06/hEu/" OR sourcentdomain CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR sourcentdomain CONTAINS "http://plresende.com/pcinfor/cq/" OR sourcentdomain CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR sourcentdomain CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://easiercommunications.com/wp-content/w/" OR sourcehostname CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR sourcehostname CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR sourcehostname CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR sourcehostname CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR sourcehostname CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR sourcehostname CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR sourcehostname CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR sourcehostname CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR sourcehostname CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR sourcehostname CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR sourcehostname CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR sourcehostname CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR sourcehostname CONTAINS "http://gakudou.com/photo06/hEu/" OR sourcehostname CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR sourcehostname CONTAINS "http://plresende.com/pcinfor/cq/" OR sourcehostname CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR sourcehostname CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://easiercommunications.com/wp-content/w/" OR destinationntdomain CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR destinationntdomain CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR destinationntdomain CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR destinationntdomain CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR destinationntdomain CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR destinationntdomain CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR destinationntdomain CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR destinationntdomain CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR destinationntdomain CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR destinationntdomain CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR destinationntdomain CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR destinationntdomain CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR destinationntdomain CONTAINS "http://gakudou.com/photo06/hEu/" OR destinationntdomain CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR destinationntdomain CONTAINS "http://plresende.com/pcinfor/cq/" OR destinationntdomain CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR destinationntdomain CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://easiercommunications.com/wp-content/w/" OR destinationhostname CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR destinationhostname CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR destinationhostname CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR destinationhostname CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR destinationhostname CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR destinationhostname CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR destinationhostname CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR destinationhostname CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR destinationhostname CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR destinationhostname CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR destinationhostname CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR destinationhostname CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR destinationhostname CONTAINS "http://gakudou.com/photo06/hEu/" OR destinationhostname CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR destinationhostname CONTAINS "http://plresende.com/pcinfor/cq/" OR destinationhostname CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR destinationhostname CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://easiercommunications.com/wp-content/w/" OR sourcentdomain CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR sourcentdomain CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR sourcentdomain CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR sourcentdomain CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR sourcentdomain CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR sourcentdomain CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR sourcentdomain CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR sourcentdomain CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR sourcentdomain CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR sourcentdomain CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR sourcentdomain CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR sourcentdomain CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR sourcentdomain CONTAINS "http://gakudou.com/photo06/hEu/" OR sourcentdomain CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR sourcentdomain CONTAINS "http://plresende.com/pcinfor/cq/" OR sourcentdomain CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR sourcentdomain CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://easiercommunications.com/wp-content/w/" OR sourcehostname CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR sourcehostname CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR sourcehostname CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR sourcehostname CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR sourcehostname CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR sourcehostname CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR sourcehostname CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR sourcehostname CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR sourcehostname CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR sourcehostname CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR sourcehostname CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR sourcehostname CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR sourcehostname CONTAINS "http://gakudou.com/photo06/hEu/" OR sourcehostname CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR sourcehostname CONTAINS "http://plresende.com/pcinfor/cq/" OR sourcehostname CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR sourcehostname CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://easiercommunications.com/wp-content/w/" OR destinationntdomain CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR destinationntdomain CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR destinationntdomain CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR destinationntdomain CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR destinationntdomain CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR destinationntdomain CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR destinationntdomain CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR destinationntdomain CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR destinationntdomain CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR destinationntdomain CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR destinationntdomain CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR destinationntdomain CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR destinationntdomain CONTAINS "http://gakudou.com/photo06/hEu/" OR destinationntdomain CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR destinationntdomain CONTAINS "http://plresende.com/pcinfor/cq/" OR destinationntdomain CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR destinationntdomain CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://easiercommunications.com/wp-content/w/" OR destinationhostname CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR destinationhostname CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR destinationhostname CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR destinationhostname CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR destinationhostname CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR destinationhostname CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR destinationhostname CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR destinationhostname CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR destinationhostname CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR destinationhostname CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR destinationhostname CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR destinationhostname CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR destinationhostname CONTAINS "http://gakudou.com/photo06/hEu/" OR destinationhostname CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR destinationhostname CONTAINS "http://plresende.com/pcinfor/cq/" OR destinationhostname CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR destinationhostname CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://easiercommunications.com/wp-content/w/" OR sourcentdomain CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR sourcentdomain CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR sourcentdomain CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR sourcentdomain CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR sourcentdomain CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR sourcentdomain CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR sourcentdomain CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR sourcentdomain CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR sourcentdomain CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR sourcentdomain CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR sourcentdomain CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR sourcentdomain CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR sourcentdomain CONTAINS "http://gakudou.com/photo06/hEu/" OR sourcentdomain CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR sourcentdomain CONTAINS "http://plresende.com/pcinfor/cq/" OR sourcentdomain CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR sourcentdomain CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://easiercommunications.com/wp-content/w/" OR sourcehostname CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR sourcehostname CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR sourcehostname CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR sourcehostname CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR sourcehostname CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR sourcehostname CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR sourcehostname CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR sourcehostname CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR sourcehostname CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR sourcehostname CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR sourcehostname CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR sourcehostname CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR sourcehostname CONTAINS "http://gakudou.com/photo06/hEu/" OR sourcehostname CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR sourcehostname CONTAINS "http://plresende.com/pcinfor/cq/" OR sourcehostname CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR sourcehostname CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://easiercommunications.com/wp-content/w/" OR destinationntdomain CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR destinationntdomain CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR destinationntdomain CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR destinationntdomain CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR destinationntdomain CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR destinationntdomain CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR destinationntdomain CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR destinationntdomain CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR destinationntdomain CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR destinationntdomain CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR destinationntdomain CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR destinationntdomain CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR destinationntdomain CONTAINS "http://gakudou.com/photo06/hEu/" OR destinationntdomain CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR destinationntdomain CONTAINS "http://plresende.com/pcinfor/cq/" OR destinationntdomain CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR destinationntdomain CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://easiercommunications.com/wp-content/w/" OR destinationhostname CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR destinationhostname CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR destinationhostname CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR destinationhostname CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR destinationhostname CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR destinationhostname CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR destinationhostname CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR destinationhostname CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR destinationhostname CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR destinationhostname CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR destinationhostname CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR destinationhostname CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR destinationhostname CONTAINS "http://gakudou.com/photo06/hEu/" OR destinationhostname CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR destinationhostname CONTAINS "http://plresende.com/pcinfor/cq/" OR destinationhostname CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR destinationhostname CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://easiercommunications.com/wp-content/w/" OR sourcentdomain CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR sourcentdomain CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR sourcentdomain CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR sourcentdomain CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR sourcentdomain CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR sourcentdomain CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR sourcentdomain CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR sourcentdomain CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR sourcentdomain CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR sourcentdomain CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR sourcentdomain CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR sourcentdomain CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR sourcentdomain CONTAINS "http://gakudou.com/photo06/hEu/" OR sourcentdomain CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR sourcentdomain CONTAINS "http://plresende.com/pcinfor/cq/" OR sourcentdomain CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR sourcentdomain CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://easiercommunications.com/wp-content/w/" OR sourcehostname CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR sourcehostname CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR sourcehostname CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR sourcehostname CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR sourcehostname CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR sourcehostname CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR sourcehostname CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR sourcehostname CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR sourcehostname CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR sourcehostname CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR sourcehostname CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR sourcehostname CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR sourcehostname CONTAINS "http://gakudou.com/photo06/hEu/" OR sourcehostname CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR sourcehostname CONTAINS "http://plresende.com/pcinfor/cq/" OR sourcehostname CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR sourcehostname CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://easiercommunications.com/wp-content/w/" OR destinationntdomain CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR destinationntdomain CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR destinationntdomain CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR destinationntdomain CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR destinationntdomain CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR destinationntdomain CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR destinationntdomain CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR destinationntdomain CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR destinationntdomain CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR destinationntdomain CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR destinationntdomain CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR destinationntdomain CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR destinationntdomain CONTAINS "http://gakudou.com/photo06/hEu/" OR destinationntdomain CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR destinationntdomain CONTAINS "http://plresende.com/pcinfor/cq/" OR destinationntdomain CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR destinationntdomain CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://easiercommunications.com/wp-content/w/" OR destinationhostname CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR destinationhostname CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR destinationhostname CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR destinationhostname CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR destinationhostname CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR destinationhostname CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR destinationhostname CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR destinationhostname CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR destinationhostname CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR destinationhostname CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR destinationhostname CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR destinationhostname CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR destinationhostname CONTAINS "http://gakudou.com/photo06/hEu/" OR destinationhostname CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR destinationhostname CONTAINS "http://plresende.com/pcinfor/cq/" OR destinationhostname CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR destinationhostname CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://easiercommunications.com/wp-content/w/" OR sourcentdomain CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR sourcentdomain CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR sourcentdomain CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR sourcentdomain CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR sourcentdomain CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR sourcentdomain CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR sourcentdomain CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR sourcentdomain CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR sourcentdomain CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR sourcentdomain CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR sourcentdomain CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR sourcentdomain CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR sourcentdomain CONTAINS "http://gakudou.com/photo06/hEu/" OR sourcentdomain CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR sourcentdomain CONTAINS "http://plresende.com/pcinfor/cq/" OR sourcentdomain CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR sourcentdomain CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://easiercommunications.com/wp-content/w/" OR sourcehostname CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR sourcehostname CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR sourcehostname CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR sourcehostname CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR sourcehostname CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR sourcehostname CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR sourcehostname CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR sourcehostname CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR sourcehostname CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR sourcehostname CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR sourcehostname CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR sourcehostname CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR sourcehostname CONTAINS "http://gakudou.com/photo06/hEu/" OR sourcehostname CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR sourcehostname CONTAINS "http://plresende.com/pcinfor/cq/" OR sourcehostname CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR sourcehostname CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://easiercommunications.com/wp-content/w/" OR destinationntdomain CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR destinationntdomain CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR destinationntdomain CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR destinationntdomain CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR destinationntdomain CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR destinationntdomain CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR destinationntdomain CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR destinationntdomain CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR destinationntdomain CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR destinationntdomain CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR destinationntdomain CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR destinationntdomain CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR destinationntdomain CONTAINS "http://gakudou.com/photo06/hEu/" OR destinationntdomain CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR destinationntdomain CONTAINS "http://plresende.com/pcinfor/cq/" OR destinationntdomain CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR destinationntdomain CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://easiercommunications.com/wp-content/w/" OR destinationhostname CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR destinationhostname CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR destinationhostname CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR destinationhostname CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR destinationhostname CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR destinationhostname CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR destinationhostname CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR destinationhostname CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR destinationhostname CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR destinationhostname CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR destinationhostname CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR destinationhostname CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR destinationhostname CONTAINS "http://gakudou.com/photo06/hEu/" OR destinationhostname CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR destinationhostname CONTAINS "http://plresende.com/pcinfor/cq/" OR destinationhostname CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR destinationhostname CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://easiercommunications.com/wp-content/w/" OR sourcentdomain CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR sourcentdomain CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR sourcentdomain CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR sourcentdomain CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR sourcentdomain CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR sourcentdomain CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR sourcentdomain CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR sourcentdomain CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR sourcentdomain CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR sourcentdomain CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR sourcentdomain CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR sourcentdomain CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR sourcentdomain CONTAINS "http://gakudou.com/photo06/hEu/" OR sourcentdomain CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR sourcentdomain CONTAINS "http://plresende.com/pcinfor/cq/" OR sourcentdomain CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR sourcentdomain CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://easiercommunications.com/wp-content/w/" OR sourcehostname CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR sourcehostname CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR sourcehostname CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR sourcehostname CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR sourcehostname CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR sourcehostname CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR sourcehostname CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR sourcehostname CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR sourcehostname CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR sourcehostname CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR sourcehostname CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR sourcehostname CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR sourcehostname CONTAINS "http://gakudou.com/photo06/hEu/" OR sourcehostname CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR sourcehostname CONTAINS "http://plresende.com/pcinfor/cq/" OR sourcehostname CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR sourcehostname CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://easiercommunications.com/wp-content/w/" OR destinationntdomain CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR destinationntdomain CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR destinationntdomain CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR destinationntdomain CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR destinationntdomain CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR destinationntdomain CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR destinationntdomain CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR destinationntdomain CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR destinationntdomain CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR destinationntdomain CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR destinationntdomain CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR destinationntdomain CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR destinationntdomain CONTAINS "http://gakudou.com/photo06/hEu/" OR destinationntdomain CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR destinationntdomain CONTAINS "http://plresende.com/pcinfor/cq/" OR destinationntdomain CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR destinationntdomain CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://easiercommunications.com/wp-content/w/" OR destinationhostname CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR destinationhostname CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR destinationhostname CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR destinationhostname CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR destinationhostname CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR destinationhostname CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR destinationhostname CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR destinationhostname CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR destinationhostname CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR destinationhostname CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR destinationhostname CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR destinationhostname CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR destinationhostname CONTAINS "http://gakudou.com/photo06/hEu/" OR destinationhostname CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR destinationhostname CONTAINS "http://plresende.com/pcinfor/cq/" OR destinationhostname CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR destinationhostname CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://easiercommunications.com/wp-content/w/" OR sourcentdomain CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR sourcentdomain CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR sourcentdomain CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR sourcentdomain CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR sourcentdomain CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR sourcentdomain CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR sourcentdomain CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR sourcentdomain CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR sourcentdomain CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR sourcentdomain CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR sourcentdomain CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR sourcentdomain CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR sourcentdomain CONTAINS "http://gakudou.com/photo06/hEu/" OR sourcentdomain CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR sourcentdomain CONTAINS "http://plresende.com/pcinfor/cq/" OR sourcentdomain CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR sourcentdomain CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://easiercommunications.com/wp-content/w/" OR sourcehostname CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR sourcehostname CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR sourcehostname CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR sourcehostname CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR sourcehostname CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR sourcehostname CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR sourcehostname CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR sourcehostname CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR sourcehostname CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR sourcehostname CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR sourcehostname CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR sourcehostname CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR sourcehostname CONTAINS "http://gakudou.com/photo06/hEu/" OR sourcehostname CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR sourcehostname CONTAINS "http://plresende.com/pcinfor/cq/" OR sourcehostname CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR sourcehostname CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://easiercommunications.com/wp-content/w/" OR destinationntdomain CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR destinationntdomain CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR destinationntdomain CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR destinationntdomain CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR destinationntdomain CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR destinationntdomain CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR destinationntdomain CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR destinationntdomain CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR destinationntdomain CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR destinationntdomain CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR destinationntdomain CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR destinationntdomain CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR destinationntdomain CONTAINS "http://gakudou.com/photo06/hEu/" OR destinationntdomain CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR destinationntdomain CONTAINS "http://plresende.com/pcinfor/cq/" OR destinationntdomain CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR destinationntdomain CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://easiercommunications.com/wp-content/w/" OR destinationhostname CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR destinationhostname CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR destinationhostname CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR destinationhostname CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR destinationhostname CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR destinationhostname CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR destinationhostname CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR destinationhostname CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR destinationhostname CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR destinationhostname CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR destinationhostname CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR destinationhostname CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR destinationhostname CONTAINS "http://gakudou.com/photo06/hEu/" OR destinationhostname CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR destinationhostname CONTAINS "http://plresende.com/pcinfor/cq/" OR destinationhostname CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR destinationhostname CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://easiercommunications.com/wp-content/w/" OR sourcentdomain CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR sourcentdomain CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR sourcentdomain CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR sourcentdomain CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR sourcentdomain CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR sourcentdomain CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR sourcentdomain CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR sourcentdomain CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR sourcentdomain CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR sourcentdomain CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR sourcentdomain CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR sourcentdomain CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR sourcentdomain CONTAINS "http://gakudou.com/photo06/hEu/" OR sourcentdomain CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR sourcentdomain CONTAINS "http://plresende.com/pcinfor/cq/" OR sourcentdomain CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR sourcentdomain CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://easiercommunications.com/wp-content/w/" OR sourcehostname CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR sourcehostname CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR sourcehostname CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR sourcehostname CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR sourcehostname CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR sourcehostname CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR sourcehostname CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR sourcehostname CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR sourcehostname CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR sourcehostname CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR sourcehostname CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR sourcehostname CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR sourcehostname CONTAINS "http://gakudou.com/photo06/hEu/" OR sourcehostname CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR sourcehostname CONTAINS "http://plresende.com/pcinfor/cq/" OR sourcehostname CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR sourcehostname CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://easiercommunications.com/wp-content/w/" OR destinationntdomain CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR destinationntdomain CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR destinationntdomain CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR destinationntdomain CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR destinationntdomain CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR destinationntdomain CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR destinationntdomain CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR destinationntdomain CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR destinationntdomain CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR destinationntdomain CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR destinationntdomain CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR destinationntdomain CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR destinationntdomain CONTAINS "http://gakudou.com/photo06/hEu/" OR destinationntdomain CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR destinationntdomain CONTAINS "http://plresende.com/pcinfor/cq/" OR destinationntdomain CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR destinationntdomain CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "http://easiercommunications.com/wp-content/w/" OR destinationhostname CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR destinationhostname CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR destinationhostname CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR destinationhostname CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR destinationhostname CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR destinationhostname CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR destinationhostname CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR destinationhostname CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR destinationhostname CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR destinationhostname CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR destinationhostname CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR destinationhostname CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR destinationhostname CONTAINS "http://gakudou.com/photo06/hEu/" OR destinationhostname CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR destinationhostname CONTAINS "http://plresende.com/pcinfor/cq/" OR destinationhostname CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR destinationhostname CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "http://easiercommunications.com/wp-content/w/" OR sourcentdomain CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR sourcentdomain CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR sourcentdomain CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR sourcentdomain CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR sourcentdomain CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR sourcentdomain CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR sourcentdomain CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR sourcentdomain CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR sourcentdomain CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR sourcentdomain CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR sourcentdomain CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR sourcentdomain CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR sourcentdomain CONTAINS "http://gakudou.com/photo06/hEu/" OR sourcentdomain CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR sourcentdomain CONTAINS "http://plresende.com/pcinfor/cq/" OR sourcentdomain CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR sourcentdomain CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "http://easiercommunications.com/wp-content/w/" OR sourcehostname CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR sourcehostname CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR sourcehostname CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR sourcehostname CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR sourcehostname CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR sourcehostname CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR sourcehostname CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR sourcehostname CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR sourcehostname CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR sourcehostname CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR sourcehostname CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR sourcehostname CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR sourcehostname CONTAINS "http://gakudou.com/photo06/hEu/" OR sourcehostname CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR sourcehostname CONTAINS "http://plresende.com/pcinfor/cq/" OR sourcehostname CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR sourcehostname CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "http://easiercommunications.com/wp-content/w/" OR destinationntdomain CONTAINS "http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/)" OR destinationntdomain CONTAINS "https://www.whow.fr/wp-includes/H54Fgj0tG/)" OR destinationntdomain CONTAINS "http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/)" OR destinationntdomain CONTAINS "http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/)" OR destinationntdomain CONTAINS "http://goonboy.com/goonie/bSFz7Av/" OR destinationntdomain CONTAINS "https://creemo.pl/wp-admin/ZKS1DcdquUT4Bb8Kb/" OR destinationntdomain CONTAINS "http://filmmogzivota.rs/SpryAssets/gDR/" OR destinationntdomain CONTAINS "http://demo34.ckg.hk/service/hhMZrfC7Mnm9JD/" OR destinationntdomain CONTAINS "http://focusmedica.in/fmlib/IxBABMh0I2cLM3qq1GVv/" OR destinationntdomain CONTAINS "http://cipro.mx/prensa/siZP69rBFmibDvuTP1L/" OR destinationntdomain CONTAINS "http://colegiounamuno.es/cgi-bin/E/" OR destinationntdomain CONTAINS "http://gccon.in/UploadedFiles/UYtJNrT2llxy1/" OR destinationntdomain CONTAINS "http://gakudou.com/photo06/hEu/" OR destinationntdomain CONTAINS "http://giasotti.com/js/Khc6mb0zx4KoWX/" OR destinationntdomain CONTAINS "http://plresende.com/pcinfor/cq/" OR destinationntdomain CONTAINS "http://thomasmanton.com/wp-includes/owZnpWmH4D8j/" OR destinationntdomain CONTAINS "http://gla.ge/old/PuVaff/")
index=activity AND rg_functionality="Next Generation Firewall" AND filehash NOT NULL AND filehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Next Generation Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Firewall" AND filehash NOT NULL AND filehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Web Proxy" AND filehash NOT NULL AND filehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Web Proxy" AND oldfilehash NOT NULL AND oldfilehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Flow" AND filehash NOT NULL AND filehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Flow" AND oldfilehash NOT NULL AND oldfilehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Web Server" AND filehash NOT NULL AND filehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Web Server" AND oldfilehash NOT NULL AND oldfilehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Web Application Firewall" AND filehash NOT NULL AND filehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Web Application Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Endpoint management systems" AND filehash NOT NULL AND filehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Endpoint management systems" AND oldfilehash NOT NULL AND oldfilehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Cloud Application Audit" AND filehash NOT NULL AND filehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Cloud Application Audit" AND oldfilehash NOT NULL AND oldfilehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Unix / Linux / AIX" AND filehash NOT NULL AND filehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Unix / Linux / AIX" AND oldfilehash NOT NULL AND oldfilehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Cloud Application Security Broker" AND filehash NOT NULL AND filehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Cloud Application Security Broker" AND oldfilehash NOT NULL AND oldfilehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Source Code Repository" AND filehash NOT NULL AND filehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Source Code Repository" AND oldfilehash NOT NULL AND oldfilehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("c32c22fa90ad51747e9939f8e7abf4c0","4203aba12278d95fe249e1d81c0e4d89a6008dec","7ebef7d77e1a32f37c60471d84c29f6e5e7915026c9856c0fcdb7237cfb180e7","fd37d5fecf99b16df331be14649ac09c","6e1da3039639bb9d40fc9d5d355062c2","c43d185691aaba7d1d196156a4a450f7","de3dd986ebc933637e6692bfaf59d89fbe587003","e0c55684965a00f825a9be2568f5035a2aae0c683d1fa2fb84d499ae13089b37")
