index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("9708680347a58e18f41c0e211032e563","81c8b1069382ea1dcd1afe7283c28e4de73b339d","a1a3160e424b860659a73a579a5f01fe0caeb14517da015b3095a86231642b0f","9313a883ff85f0384ac4276bdab8937b","8638c0f0ed7905ab7e7ad5eada3d9d621bb5a7e0","5eeb3c3ae69941127e6c03581fc6274614e2d934631cca6c82cda688fb1ebadc","ae25f2104967b2708ac9dba80aac52fd","7ac0150b43cbb5eeba9a0f956e1291df6790f3bf","11b3d1564b12934489281250c9a683f076fe10254bfdd7da72307e538838ec56","bfc060937dc90b273eccb6825145f298","c156c00c7e918f0cb7363614fb1f177c90d8108a","2f39c2879989ddd7f9ecf52b6232598e5595f8bf367846ff188c9dfbf1251253")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("9708680347a58e18f41c0e211032e563","81c8b1069382ea1dcd1afe7283c28e4de73b339d","a1a3160e424b860659a73a579a5f01fe0caeb14517da015b3095a86231642b0f","9313a883ff85f0384ac4276bdab8937b","8638c0f0ed7905ab7e7ad5eada3d9d621bb5a7e0","5eeb3c3ae69941127e6c03581fc6274614e2d934631cca6c82cda688fb1ebadc","ae25f2104967b2708ac9dba80aac52fd","7ac0150b43cbb5eeba9a0f956e1291df6790f3bf","11b3d1564b12934489281250c9a683f076fe10254bfdd7da72307e538838ec56","bfc060937dc90b273eccb6825145f298","c156c00c7e918f0cb7363614fb1f177c90d8108a","2f39c2879989ddd7f9ecf52b6232598e5595f8bf367846ff188c9dfbf1251253")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("9708680347a58e18f41c0e211032e563","81c8b1069382ea1dcd1afe7283c28e4de73b339d","a1a3160e424b860659a73a579a5f01fe0caeb14517da015b3095a86231642b0f","9313a883ff85f0384ac4276bdab8937b","8638c0f0ed7905ab7e7ad5eada3d9d621bb5a7e0","5eeb3c3ae69941127e6c03581fc6274614e2d934631cca6c82cda688fb1ebadc","ae25f2104967b2708ac9dba80aac52fd","7ac0150b43cbb5eeba9a0f956e1291df6790f3bf","11b3d1564b12934489281250c9a683f076fe10254bfdd7da72307e538838ec56","bfc060937dc90b273eccb6825145f298","c156c00c7e918f0cb7363614fb1f177c90d8108a","2f39c2879989ddd7f9ecf52b6232598e5595f8bf367846ff188c9dfbf1251253")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("9708680347a58e18f41c0e211032e563","81c8b1069382ea1dcd1afe7283c28e4de73b339d","a1a3160e424b860659a73a579a5f01fe0caeb14517da015b3095a86231642b0f","9313a883ff85f0384ac4276bdab8937b","8638c0f0ed7905ab7e7ad5eada3d9d621bb5a7e0","5eeb3c3ae69941127e6c03581fc6274614e2d934631cca6c82cda688fb1ebadc","ae25f2104967b2708ac9dba80aac52fd","7ac0150b43cbb5eeba9a0f956e1291df6790f3bf","11b3d1564b12934489281250c9a683f076fe10254bfdd7da72307e538838ec56","bfc060937dc90b273eccb6825145f298","c156c00c7e918f0cb7363614fb1f177c90d8108a","2f39c2879989ddd7f9ecf52b6232598e5595f8bf367846ff188c9dfbf1251253")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("9708680347a58e18f41c0e211032e563","81c8b1069382ea1dcd1afe7283c28e4de73b339d","a1a3160e424b860659a73a579a5f01fe0caeb14517da015b3095a86231642b0f","9313a883ff85f0384ac4276bdab8937b","8638c0f0ed7905ab7e7ad5eada3d9d621bb5a7e0","5eeb3c3ae69941127e6c03581fc6274614e2d934631cca6c82cda688fb1ebadc","ae25f2104967b2708ac9dba80aac52fd","7ac0150b43cbb5eeba9a0f956e1291df6790f3bf","11b3d1564b12934489281250c9a683f076fe10254bfdd7da72307e538838ec56","bfc060937dc90b273eccb6825145f298","c156c00c7e918f0cb7363614fb1f177c90d8108a","2f39c2879989ddd7f9ecf52b6232598e5595f8bf367846ff188c9dfbf1251253")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("9708680347a58e18f41c0e211032e563","81c8b1069382ea1dcd1afe7283c28e4de73b339d","a1a3160e424b860659a73a579a5f01fe0caeb14517da015b3095a86231642b0f","9313a883ff85f0384ac4276bdab8937b","8638c0f0ed7905ab7e7ad5eada3d9d621bb5a7e0","5eeb3c3ae69941127e6c03581fc6274614e2d934631cca6c82cda688fb1ebadc","ae25f2104967b2708ac9dba80aac52fd","7ac0150b43cbb5eeba9a0f956e1291df6790f3bf","11b3d1564b12934489281250c9a683f076fe10254bfdd7da72307e538838ec56","bfc060937dc90b273eccb6825145f298","c156c00c7e918f0cb7363614fb1f177c90d8108a","2f39c2879989ddd7f9ecf52b6232598e5595f8bf367846ff188c9dfbf1251253")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("9708680347a58e18f41c0e211032e563","81c8b1069382ea1dcd1afe7283c28e4de73b339d","a1a3160e424b860659a73a579a5f01fe0caeb14517da015b3095a86231642b0f","9313a883ff85f0384ac4276bdab8937b","8638c0f0ed7905ab7e7ad5eada3d9d621bb5a7e0","5eeb3c3ae69941127e6c03581fc6274614e2d934631cca6c82cda688fb1ebadc","ae25f2104967b2708ac9dba80aac52fd","7ac0150b43cbb5eeba9a0f956e1291df6790f3bf","11b3d1564b12934489281250c9a683f076fe10254bfdd7da72307e538838ec56","bfc060937dc90b273eccb6825145f298","c156c00c7e918f0cb7363614fb1f177c90d8108a","2f39c2879989ddd7f9ecf52b6232598e5595f8bf367846ff188c9dfbf1251253")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("9708680347a58e18f41c0e211032e563","81c8b1069382ea1dcd1afe7283c28e4de73b339d","a1a3160e424b860659a73a579a5f01fe0caeb14517da015b3095a86231642b0f","9313a883ff85f0384ac4276bdab8937b","8638c0f0ed7905ab7e7ad5eada3d9d621bb5a7e0","5eeb3c3ae69941127e6c03581fc6274614e2d934631cca6c82cda688fb1ebadc","ae25f2104967b2708ac9dba80aac52fd","7ac0150b43cbb5eeba9a0f956e1291df6790f3bf","11b3d1564b12934489281250c9a683f076fe10254bfdd7da72307e538838ec56","bfc060937dc90b273eccb6825145f298","c156c00c7e918f0cb7363614fb1f177c90d8108a","2f39c2879989ddd7f9ecf52b6232598e5595f8bf367846ff188c9dfbf1251253")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("9708680347a58e18f41c0e211032e563","81c8b1069382ea1dcd1afe7283c28e4de73b339d","a1a3160e424b860659a73a579a5f01fe0caeb14517da015b3095a86231642b0f","9313a883ff85f0384ac4276bdab8937b","8638c0f0ed7905ab7e7ad5eada3d9d621bb5a7e0","5eeb3c3ae69941127e6c03581fc6274614e2d934631cca6c82cda688fb1ebadc","ae25f2104967b2708ac9dba80aac52fd","7ac0150b43cbb5eeba9a0f956e1291df6790f3bf","11b3d1564b12934489281250c9a683f076fe10254bfdd7da72307e538838ec56","bfc060937dc90b273eccb6825145f298","c156c00c7e918f0cb7363614fb1f177c90d8108a","2f39c2879989ddd7f9ecf52b6232598e5595f8bf367846ff188c9dfbf1251253")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("9708680347a58e18f41c0e211032e563","81c8b1069382ea1dcd1afe7283c28e4de73b339d","a1a3160e424b860659a73a579a5f01fe0caeb14517da015b3095a86231642b0f","9313a883ff85f0384ac4276bdab8937b","8638c0f0ed7905ab7e7ad5eada3d9d621bb5a7e0","5eeb3c3ae69941127e6c03581fc6274614e2d934631cca6c82cda688fb1ebadc","ae25f2104967b2708ac9dba80aac52fd","7ac0150b43cbb5eeba9a0f956e1291df6790f3bf","11b3d1564b12934489281250c9a683f076fe10254bfdd7da72307e538838ec56","bfc060937dc90b273eccb6825145f298","c156c00c7e918f0cb7363614fb1f177c90d8108a","2f39c2879989ddd7f9ecf52b6232598e5595f8bf367846ff188c9dfbf1251253")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("9708680347a58e18f41c0e211032e563","81c8b1069382ea1dcd1afe7283c28e4de73b339d","a1a3160e424b860659a73a579a5f01fe0caeb14517da015b3095a86231642b0f","9313a883ff85f0384ac4276bdab8937b","8638c0f0ed7905ab7e7ad5eada3d9d621bb5a7e0","5eeb3c3ae69941127e6c03581fc6274614e2d934631cca6c82cda688fb1ebadc","ae25f2104967b2708ac9dba80aac52fd","7ac0150b43cbb5eeba9a0f956e1291df6790f3bf","11b3d1564b12934489281250c9a683f076fe10254bfdd7da72307e538838ec56","bfc060937dc90b273eccb6825145f298","c156c00c7e918f0cb7363614fb1f177c90d8108a","2f39c2879989ddd7f9ecf52b6232598e5595f8bf367846ff188c9dfbf1251253")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("9708680347a58e18f41c0e211032e563","81c8b1069382ea1dcd1afe7283c28e4de73b339d","a1a3160e424b860659a73a579a5f01fe0caeb14517da015b3095a86231642b0f","9313a883ff85f0384ac4276bdab8937b","8638c0f0ed7905ab7e7ad5eada3d9d621bb5a7e0","5eeb3c3ae69941127e6c03581fc6274614e2d934631cca6c82cda688fb1ebadc","ae25f2104967b2708ac9dba80aac52fd","7ac0150b43cbb5eeba9a0f956e1291df6790f3bf","11b3d1564b12934489281250c9a683f076fe10254bfdd7da72307e538838ec56","bfc060937dc90b273eccb6825145f298","c156c00c7e918f0cb7363614fb1f177c90d8108a","2f39c2879989ddd7f9ecf52b6232598e5595f8bf367846ff188c9dfbf1251253")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("9708680347a58e18f41c0e211032e563","81c8b1069382ea1dcd1afe7283c28e4de73b339d","a1a3160e424b860659a73a579a5f01fe0caeb14517da015b3095a86231642b0f","9313a883ff85f0384ac4276bdab8937b","8638c0f0ed7905ab7e7ad5eada3d9d621bb5a7e0","5eeb3c3ae69941127e6c03581fc6274614e2d934631cca6c82cda688fb1ebadc","ae25f2104967b2708ac9dba80aac52fd","7ac0150b43cbb5eeba9a0f956e1291df6790f3bf","11b3d1564b12934489281250c9a683f076fe10254bfdd7da72307e538838ec56","bfc060937dc90b273eccb6825145f298","c156c00c7e918f0cb7363614fb1f177c90d8108a","2f39c2879989ddd7f9ecf52b6232598e5595f8bf367846ff188c9dfbf1251253")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("9708680347a58e18f41c0e211032e563","81c8b1069382ea1dcd1afe7283c28e4de73b339d","a1a3160e424b860659a73a579a5f01fe0caeb14517da015b3095a86231642b0f","9313a883ff85f0384ac4276bdab8937b","8638c0f0ed7905ab7e7ad5eada3d9d621bb5a7e0","5eeb3c3ae69941127e6c03581fc6274614e2d934631cca6c82cda688fb1ebadc","ae25f2104967b2708ac9dba80aac52fd","7ac0150b43cbb5eeba9a0f956e1291df6790f3bf","11b3d1564b12934489281250c9a683f076fe10254bfdd7da72307e538838ec56","bfc060937dc90b273eccb6825145f298","c156c00c7e918f0cb7363614fb1f177c90d8108a","2f39c2879989ddd7f9ecf52b6232598e5595f8bf367846ff188c9dfbf1251253")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("9708680347a58e18f41c0e211032e563","81c8b1069382ea1dcd1afe7283c28e4de73b339d","a1a3160e424b860659a73a579a5f01fe0caeb14517da015b3095a86231642b0f","9313a883ff85f0384ac4276bdab8937b","8638c0f0ed7905ab7e7ad5eada3d9d621bb5a7e0","5eeb3c3ae69941127e6c03581fc6274614e2d934631cca6c82cda688fb1ebadc","ae25f2104967b2708ac9dba80aac52fd","7ac0150b43cbb5eeba9a0f956e1291df6790f3bf","11b3d1564b12934489281250c9a683f076fe10254bfdd7da72307e538838ec56","bfc060937dc90b273eccb6825145f298","c156c00c7e918f0cb7363614fb1f177c90d8108a","2f39c2879989ddd7f9ecf52b6232598e5595f8bf367846ff188c9dfbf1251253")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("9708680347a58e18f41c0e211032e563","81c8b1069382ea1dcd1afe7283c28e4de73b339d","a1a3160e424b860659a73a579a5f01fe0caeb14517da015b3095a86231642b0f","9313a883ff85f0384ac4276bdab8937b","8638c0f0ed7905ab7e7ad5eada3d9d621bb5a7e0","5eeb3c3ae69941127e6c03581fc6274614e2d934631cca6c82cda688fb1ebadc","ae25f2104967b2708ac9dba80aac52fd","7ac0150b43cbb5eeba9a0f956e1291df6790f3bf","11b3d1564b12934489281250c9a683f076fe10254bfdd7da72307e538838ec56","bfc060937dc90b273eccb6825145f298","c156c00c7e918f0cb7363614fb1f177c90d8108a","2f39c2879989ddd7f9ecf52b6232598e5595f8bf367846ff188c9dfbf1251253")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("9708680347a58e18f41c0e211032e563","81c8b1069382ea1dcd1afe7283c28e4de73b339d","a1a3160e424b860659a73a579a5f01fe0caeb14517da015b3095a86231642b0f","9313a883ff85f0384ac4276bdab8937b","8638c0f0ed7905ab7e7ad5eada3d9d621bb5a7e0","5eeb3c3ae69941127e6c03581fc6274614e2d934631cca6c82cda688fb1ebadc","ae25f2104967b2708ac9dba80aac52fd","7ac0150b43cbb5eeba9a0f956e1291df6790f3bf","11b3d1564b12934489281250c9a683f076fe10254bfdd7da72307e538838ec56","bfc060937dc90b273eccb6825145f298","c156c00c7e918f0cb7363614fb1f177c90d8108a","2f39c2879989ddd7f9ecf52b6232598e5595f8bf367846ff188c9dfbf1251253")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("9708680347a58e18f41c0e211032e563","81c8b1069382ea1dcd1afe7283c28e4de73b339d","a1a3160e424b860659a73a579a5f01fe0caeb14517da015b3095a86231642b0f","9313a883ff85f0384ac4276bdab8937b","8638c0f0ed7905ab7e7ad5eada3d9d621bb5a7e0","5eeb3c3ae69941127e6c03581fc6274614e2d934631cca6c82cda688fb1ebadc","ae25f2104967b2708ac9dba80aac52fd","7ac0150b43cbb5eeba9a0f956e1291df6790f3bf","11b3d1564b12934489281250c9a683f076fe10254bfdd7da72307e538838ec56","bfc060937dc90b273eccb6825145f298","c156c00c7e918f0cb7363614fb1f177c90d8108a","2f39c2879989ddd7f9ecf52b6232598e5595f8bf367846ff188c9dfbf1251253")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("9708680347a58e18f41c0e211032e563","81c8b1069382ea1dcd1afe7283c28e4de73b339d","a1a3160e424b860659a73a579a5f01fe0caeb14517da015b3095a86231642b0f","9313a883ff85f0384ac4276bdab8937b","8638c0f0ed7905ab7e7ad5eada3d9d621bb5a7e0","5eeb3c3ae69941127e6c03581fc6274614e2d934631cca6c82cda688fb1ebadc","ae25f2104967b2708ac9dba80aac52fd","7ac0150b43cbb5eeba9a0f956e1291df6790f3bf","11b3d1564b12934489281250c9a683f076fe10254bfdd7da72307e538838ec56","bfc060937dc90b273eccb6825145f298","c156c00c7e918f0cb7363614fb1f177c90d8108a","2f39c2879989ddd7f9ecf52b6232598e5595f8bf367846ff188c9dfbf1251253")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("9708680347a58e18f41c0e211032e563","81c8b1069382ea1dcd1afe7283c28e4de73b339d","a1a3160e424b860659a73a579a5f01fe0caeb14517da015b3095a86231642b0f","9313a883ff85f0384ac4276bdab8937b","8638c0f0ed7905ab7e7ad5eada3d9d621bb5a7e0","5eeb3c3ae69941127e6c03581fc6274614e2d934631cca6c82cda688fb1ebadc","ae25f2104967b2708ac9dba80aac52fd","7ac0150b43cbb5eeba9a0f956e1291df6790f3bf","11b3d1564b12934489281250c9a683f076fe10254bfdd7da72307e538838ec56","bfc060937dc90b273eccb6825145f298","c156c00c7e918f0cb7363614fb1f177c90d8108a","2f39c2879989ddd7f9ecf52b6232598e5595f8bf367846ff188c9dfbf1251253")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("9708680347a58e18f41c0e211032e563","81c8b1069382ea1dcd1afe7283c28e4de73b339d","a1a3160e424b860659a73a579a5f01fe0caeb14517da015b3095a86231642b0f","9313a883ff85f0384ac4276bdab8937b","8638c0f0ed7905ab7e7ad5eada3d9d621bb5a7e0","5eeb3c3ae69941127e6c03581fc6274614e2d934631cca6c82cda688fb1ebadc","ae25f2104967b2708ac9dba80aac52fd","7ac0150b43cbb5eeba9a0f956e1291df6790f3bf","11b3d1564b12934489281250c9a683f076fe10254bfdd7da72307e538838ec56","bfc060937dc90b273eccb6825145f298","c156c00c7e918f0cb7363614fb1f177c90d8108a","2f39c2879989ddd7f9ecf52b6232598e5595f8bf367846ff188c9dfbf1251253")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("9708680347a58e18f41c0e211032e563","81c8b1069382ea1dcd1afe7283c28e4de73b339d","a1a3160e424b860659a73a579a5f01fe0caeb14517da015b3095a86231642b0f","9313a883ff85f0384ac4276bdab8937b","8638c0f0ed7905ab7e7ad5eada3d9d621bb5a7e0","5eeb3c3ae69941127e6c03581fc6274614e2d934631cca6c82cda688fb1ebadc","ae25f2104967b2708ac9dba80aac52fd","7ac0150b43cbb5eeba9a0f956e1291df6790f3bf","11b3d1564b12934489281250c9a683f076fe10254bfdd7da72307e538838ec56","bfc060937dc90b273eccb6825145f298","c156c00c7e918f0cb7363614fb1f177c90d8108a","2f39c2879989ddd7f9ecf52b6232598e5595f8bf367846ff188c9dfbf1251253")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("9708680347a58e18f41c0e211032e563","81c8b1069382ea1dcd1afe7283c28e4de73b339d","a1a3160e424b860659a73a579a5f01fe0caeb14517da015b3095a86231642b0f","9313a883ff85f0384ac4276bdab8937b","8638c0f0ed7905ab7e7ad5eada3d9d621bb5a7e0","5eeb3c3ae69941127e6c03581fc6274614e2d934631cca6c82cda688fb1ebadc","ae25f2104967b2708ac9dba80aac52fd","7ac0150b43cbb5eeba9a0f956e1291df6790f3bf","11b3d1564b12934489281250c9a683f076fe10254bfdd7da72307e538838ec56","bfc060937dc90b273eccb6825145f298","c156c00c7e918f0cb7363614fb1f177c90d8108a","2f39c2879989ddd7f9ecf52b6232598e5595f8bf367846ff188c9dfbf1251253")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("9708680347a58e18f41c0e211032e563","81c8b1069382ea1dcd1afe7283c28e4de73b339d","a1a3160e424b860659a73a579a5f01fe0caeb14517da015b3095a86231642b0f","9313a883ff85f0384ac4276bdab8937b","8638c0f0ed7905ab7e7ad5eada3d9d621bb5a7e0","5eeb3c3ae69941127e6c03581fc6274614e2d934631cca6c82cda688fb1ebadc","ae25f2104967b2708ac9dba80aac52fd","7ac0150b43cbb5eeba9a0f956e1291df6790f3bf","11b3d1564b12934489281250c9a683f076fe10254bfdd7da72307e538838ec56","bfc060937dc90b273eccb6825145f298","c156c00c7e918f0cb7363614fb1f177c90d8108a","2f39c2879989ddd7f9ecf52b6232598e5595f8bf367846ff188c9dfbf1251253")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("9708680347a58e18f41c0e211032e563","81c8b1069382ea1dcd1afe7283c28e4de73b339d","a1a3160e424b860659a73a579a5f01fe0caeb14517da015b3095a86231642b0f","9313a883ff85f0384ac4276bdab8937b","8638c0f0ed7905ab7e7ad5eada3d9d621bb5a7e0","5eeb3c3ae69941127e6c03581fc6274614e2d934631cca6c82cda688fb1ebadc","ae25f2104967b2708ac9dba80aac52fd","7ac0150b43cbb5eeba9a0f956e1291df6790f3bf","11b3d1564b12934489281250c9a683f076fe10254bfdd7da72307e538838ec56","bfc060937dc90b273eccb6825145f298","c156c00c7e918f0cb7363614fb1f177c90d8108a","2f39c2879989ddd7f9ecf52b6232598e5595f8bf367846ff188c9dfbf1251253")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("9708680347a58e18f41c0e211032e563","81c8b1069382ea1dcd1afe7283c28e4de73b339d","a1a3160e424b860659a73a579a5f01fe0caeb14517da015b3095a86231642b0f","9313a883ff85f0384ac4276bdab8937b","8638c0f0ed7905ab7e7ad5eada3d9d621bb5a7e0","5eeb3c3ae69941127e6c03581fc6274614e2d934631cca6c82cda688fb1ebadc","ae25f2104967b2708ac9dba80aac52fd","7ac0150b43cbb5eeba9a0f956e1291df6790f3bf","11b3d1564b12934489281250c9a683f076fe10254bfdd7da72307e538838ec56","bfc060937dc90b273eccb6825145f298","c156c00c7e918f0cb7363614fb1f177c90d8108a","2f39c2879989ddd7f9ecf52b6232598e5595f8bf367846ff188c9dfbf1251253")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("9708680347a58e18f41c0e211032e563","81c8b1069382ea1dcd1afe7283c28e4de73b339d","a1a3160e424b860659a73a579a5f01fe0caeb14517da015b3095a86231642b0f","9313a883ff85f0384ac4276bdab8937b","8638c0f0ed7905ab7e7ad5eada3d9d621bb5a7e0","5eeb3c3ae69941127e6c03581fc6274614e2d934631cca6c82cda688fb1ebadc","ae25f2104967b2708ac9dba80aac52fd","7ac0150b43cbb5eeba9a0f956e1291df6790f3bf","11b3d1564b12934489281250c9a683f076fe10254bfdd7da72307e538838ec56","bfc060937dc90b273eccb6825145f298","c156c00c7e918f0cb7363614fb1f177c90d8108a","2f39c2879989ddd7f9ecf52b6232598e5595f8bf367846ff188c9dfbf1251253")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("9708680347a58e18f41c0e211032e563","81c8b1069382ea1dcd1afe7283c28e4de73b339d","a1a3160e424b860659a73a579a5f01fe0caeb14517da015b3095a86231642b0f","9313a883ff85f0384ac4276bdab8937b","8638c0f0ed7905ab7e7ad5eada3d9d621bb5a7e0","5eeb3c3ae69941127e6c03581fc6274614e2d934631cca6c82cda688fb1ebadc","ae25f2104967b2708ac9dba80aac52fd","7ac0150b43cbb5eeba9a0f956e1291df6790f3bf","11b3d1564b12934489281250c9a683f076fe10254bfdd7da72307e538838ec56","bfc060937dc90b273eccb6825145f298","c156c00c7e918f0cb7363614fb1f177c90d8108a","2f39c2879989ddd7f9ecf52b6232598e5595f8bf367846ff188c9dfbf1251253")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("9708680347a58e18f41c0e211032e563","81c8b1069382ea1dcd1afe7283c28e4de73b339d","a1a3160e424b860659a73a579a5f01fe0caeb14517da015b3095a86231642b0f","9313a883ff85f0384ac4276bdab8937b","8638c0f0ed7905ab7e7ad5eada3d9d621bb5a7e0","5eeb3c3ae69941127e6c03581fc6274614e2d934631cca6c82cda688fb1ebadc","ae25f2104967b2708ac9dba80aac52fd","7ac0150b43cbb5eeba9a0f956e1291df6790f3bf","11b3d1564b12934489281250c9a683f076fe10254bfdd7da72307e538838ec56","bfc060937dc90b273eccb6825145f298","c156c00c7e918f0cb7363614fb1f177c90d8108a","2f39c2879989ddd7f9ecf52b6232598e5595f8bf367846ff188c9dfbf1251253")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("9708680347a58e18f41c0e211032e563","81c8b1069382ea1dcd1afe7283c28e4de73b339d","a1a3160e424b860659a73a579a5f01fe0caeb14517da015b3095a86231642b0f","9313a883ff85f0384ac4276bdab8937b","8638c0f0ed7905ab7e7ad5eada3d9d621bb5a7e0","5eeb3c3ae69941127e6c03581fc6274614e2d934631cca6c82cda688fb1ebadc","ae25f2104967b2708ac9dba80aac52fd","7ac0150b43cbb5eeba9a0f956e1291df6790f3bf","11b3d1564b12934489281250c9a683f076fe10254bfdd7da72307e538838ec56","bfc060937dc90b273eccb6825145f298","c156c00c7e918f0cb7363614fb1f177c90d8108a","2f39c2879989ddd7f9ecf52b6232598e5595f8bf367846ff188c9dfbf1251253")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("9708680347a58e18f41c0e211032e563","81c8b1069382ea1dcd1afe7283c28e4de73b339d","a1a3160e424b860659a73a579a5f01fe0caeb14517da015b3095a86231642b0f","9313a883ff85f0384ac4276bdab8937b","8638c0f0ed7905ab7e7ad5eada3d9d621bb5a7e0","5eeb3c3ae69941127e6c03581fc6274614e2d934631cca6c82cda688fb1ebadc","ae25f2104967b2708ac9dba80aac52fd","7ac0150b43cbb5eeba9a0f956e1291df6790f3bf","11b3d1564b12934489281250c9a683f076fe10254bfdd7da72307e538838ec56","bfc060937dc90b273eccb6825145f298","c156c00c7e918f0cb7363614fb1f177c90d8108a","2f39c2879989ddd7f9ecf52b6232598e5595f8bf367846ff188c9dfbf1251253")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("9708680347a58e18f41c0e211032e563","81c8b1069382ea1dcd1afe7283c28e4de73b339d","a1a3160e424b860659a73a579a5f01fe0caeb14517da015b3095a86231642b0f","9313a883ff85f0384ac4276bdab8937b","8638c0f0ed7905ab7e7ad5eada3d9d621bb5a7e0","5eeb3c3ae69941127e6c03581fc6274614e2d934631cca6c82cda688fb1ebadc","ae25f2104967b2708ac9dba80aac52fd","7ac0150b43cbb5eeba9a0f956e1291df6790f3bf","11b3d1564b12934489281250c9a683f076fe10254bfdd7da72307e538838ec56","bfc060937dc90b273eccb6825145f298","c156c00c7e918f0cb7363614fb1f177c90d8108a","2f39c2879989ddd7f9ecf52b6232598e5595f8bf367846ff188c9dfbf1251253")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("http://malli.su:80/img/pxn5j/","https://kts.group/35ccbf2003/jkgk8/","https://olgaperezporro.com/js/exgbiczdkkw0gbauhnz/","https://4fly.su:443/search/ofga/","http://staging-demo.com/public_html/wtg/","http://semedacara.com.br/ava/ahhz/","http://hypernite.5v.pl/vendor/hvlvmsi9jgafbbta/","http://www.polarkh-crewing.com/aboutus/euzmzx7yxpp/","http://efirma.sglwebs.com/img/2mmluv7sxhhyfrvn/","http://uk-eurodom.com/bitrix/9hrzpy66d1f/","http://1it.fit/site_vp/4pwk3s6bf9k7tea/","https://thailandcan.org/assets/ulra/")
