index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("9f22626232934970e4851467b7b746578f0f149984cd0e4e1a156b391727fac9","6d55f25222831cce73fd9a64a8e5a63b002522dc2637bd2704f77168c7c02d88","9bda03babb0f2c6aa9861eca95b33af06a650e2851cce4edcc1fc3abd8e7c2a1","5bd4987db7e6946bf2ca3f73e17d6f75e2d8217df63b2f7763ea9a6ebcaf9fed","2de72908e0a1ef97e4e06d8b1ba3dc0d76f580cdf36f96b5c919bea770b2805f")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("9f22626232934970e4851467b7b746578f0f149984cd0e4e1a156b391727fac9","6d55f25222831cce73fd9a64a8e5a63b002522dc2637bd2704f77168c7c02d88","9bda03babb0f2c6aa9861eca95b33af06a650e2851cce4edcc1fc3abd8e7c2a1","5bd4987db7e6946bf2ca3f73e17d6f75e2d8217df63b2f7763ea9a6ebcaf9fed","2de72908e0a1ef97e4e06d8b1ba3dc0d76f580cdf36f96b5c919bea770b2805f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("9f22626232934970e4851467b7b746578f0f149984cd0e4e1a156b391727fac9","6d55f25222831cce73fd9a64a8e5a63b002522dc2637bd2704f77168c7c02d88","9bda03babb0f2c6aa9861eca95b33af06a650e2851cce4edcc1fc3abd8e7c2a1","5bd4987db7e6946bf2ca3f73e17d6f75e2d8217df63b2f7763ea9a6ebcaf9fed","2de72908e0a1ef97e4e06d8b1ba3dc0d76f580cdf36f96b5c919bea770b2805f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("9f22626232934970e4851467b7b746578f0f149984cd0e4e1a156b391727fac9","6d55f25222831cce73fd9a64a8e5a63b002522dc2637bd2704f77168c7c02d88","9bda03babb0f2c6aa9861eca95b33af06a650e2851cce4edcc1fc3abd8e7c2a1","5bd4987db7e6946bf2ca3f73e17d6f75e2d8217df63b2f7763ea9a6ebcaf9fed","2de72908e0a1ef97e4e06d8b1ba3dc0d76f580cdf36f96b5c919bea770b2805f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("9f22626232934970e4851467b7b746578f0f149984cd0e4e1a156b391727fac9","6d55f25222831cce73fd9a64a8e5a63b002522dc2637bd2704f77168c7c02d88","9bda03babb0f2c6aa9861eca95b33af06a650e2851cce4edcc1fc3abd8e7c2a1","5bd4987db7e6946bf2ca3f73e17d6f75e2d8217df63b2f7763ea9a6ebcaf9fed","2de72908e0a1ef97e4e06d8b1ba3dc0d76f580cdf36f96b5c919bea770b2805f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("9f22626232934970e4851467b7b746578f0f149984cd0e4e1a156b391727fac9","6d55f25222831cce73fd9a64a8e5a63b002522dc2637bd2704f77168c7c02d88","9bda03babb0f2c6aa9861eca95b33af06a650e2851cce4edcc1fc3abd8e7c2a1","5bd4987db7e6946bf2ca3f73e17d6f75e2d8217df63b2f7763ea9a6ebcaf9fed","2de72908e0a1ef97e4e06d8b1ba3dc0d76f580cdf36f96b5c919bea770b2805f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("9f22626232934970e4851467b7b746578f0f149984cd0e4e1a156b391727fac9","6d55f25222831cce73fd9a64a8e5a63b002522dc2637bd2704f77168c7c02d88","9bda03babb0f2c6aa9861eca95b33af06a650e2851cce4edcc1fc3abd8e7c2a1","5bd4987db7e6946bf2ca3f73e17d6f75e2d8217df63b2f7763ea9a6ebcaf9fed","2de72908e0a1ef97e4e06d8b1ba3dc0d76f580cdf36f96b5c919bea770b2805f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("9f22626232934970e4851467b7b746578f0f149984cd0e4e1a156b391727fac9","6d55f25222831cce73fd9a64a8e5a63b002522dc2637bd2704f77168c7c02d88","9bda03babb0f2c6aa9861eca95b33af06a650e2851cce4edcc1fc3abd8e7c2a1","5bd4987db7e6946bf2ca3f73e17d6f75e2d8217df63b2f7763ea9a6ebcaf9fed","2de72908e0a1ef97e4e06d8b1ba3dc0d76f580cdf36f96b5c919bea770b2805f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("9f22626232934970e4851467b7b746578f0f149984cd0e4e1a156b391727fac9","6d55f25222831cce73fd9a64a8e5a63b002522dc2637bd2704f77168c7c02d88","9bda03babb0f2c6aa9861eca95b33af06a650e2851cce4edcc1fc3abd8e7c2a1","5bd4987db7e6946bf2ca3f73e17d6f75e2d8217df63b2f7763ea9a6ebcaf9fed","2de72908e0a1ef97e4e06d8b1ba3dc0d76f580cdf36f96b5c919bea770b2805f")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("9f22626232934970e4851467b7b746578f0f149984cd0e4e1a156b391727fac9","6d55f25222831cce73fd9a64a8e5a63b002522dc2637bd2704f77168c7c02d88","9bda03babb0f2c6aa9861eca95b33af06a650e2851cce4edcc1fc3abd8e7c2a1","5bd4987db7e6946bf2ca3f73e17d6f75e2d8217df63b2f7763ea9a6ebcaf9fed","2de72908e0a1ef97e4e06d8b1ba3dc0d76f580cdf36f96b5c919bea770b2805f")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("9f22626232934970e4851467b7b746578f0f149984cd0e4e1a156b391727fac9","6d55f25222831cce73fd9a64a8e5a63b002522dc2637bd2704f77168c7c02d88","9bda03babb0f2c6aa9861eca95b33af06a650e2851cce4edcc1fc3abd8e7c2a1","5bd4987db7e6946bf2ca3f73e17d6f75e2d8217df63b2f7763ea9a6ebcaf9fed","2de72908e0a1ef97e4e06d8b1ba3dc0d76f580cdf36f96b5c919bea770b2805f")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("9f22626232934970e4851467b7b746578f0f149984cd0e4e1a156b391727fac9","6d55f25222831cce73fd9a64a8e5a63b002522dc2637bd2704f77168c7c02d88","9bda03babb0f2c6aa9861eca95b33af06a650e2851cce4edcc1fc3abd8e7c2a1","5bd4987db7e6946bf2ca3f73e17d6f75e2d8217df63b2f7763ea9a6ebcaf9fed","2de72908e0a1ef97e4e06d8b1ba3dc0d76f580cdf36f96b5c919bea770b2805f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("9f22626232934970e4851467b7b746578f0f149984cd0e4e1a156b391727fac9","6d55f25222831cce73fd9a64a8e5a63b002522dc2637bd2704f77168c7c02d88","9bda03babb0f2c6aa9861eca95b33af06a650e2851cce4edcc1fc3abd8e7c2a1","5bd4987db7e6946bf2ca3f73e17d6f75e2d8217df63b2f7763ea9a6ebcaf9fed","2de72908e0a1ef97e4e06d8b1ba3dc0d76f580cdf36f96b5c919bea770b2805f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("9f22626232934970e4851467b7b746578f0f149984cd0e4e1a156b391727fac9","6d55f25222831cce73fd9a64a8e5a63b002522dc2637bd2704f77168c7c02d88","9bda03babb0f2c6aa9861eca95b33af06a650e2851cce4edcc1fc3abd8e7c2a1","5bd4987db7e6946bf2ca3f73e17d6f75e2d8217df63b2f7763ea9a6ebcaf9fed","2de72908e0a1ef97e4e06d8b1ba3dc0d76f580cdf36f96b5c919bea770b2805f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("9f22626232934970e4851467b7b746578f0f149984cd0e4e1a156b391727fac9","6d55f25222831cce73fd9a64a8e5a63b002522dc2637bd2704f77168c7c02d88","9bda03babb0f2c6aa9861eca95b33af06a650e2851cce4edcc1fc3abd8e7c2a1","5bd4987db7e6946bf2ca3f73e17d6f75e2d8217df63b2f7763ea9a6ebcaf9fed","2de72908e0a1ef97e4e06d8b1ba3dc0d76f580cdf36f96b5c919bea770b2805f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("9f22626232934970e4851467b7b746578f0f149984cd0e4e1a156b391727fac9","6d55f25222831cce73fd9a64a8e5a63b002522dc2637bd2704f77168c7c02d88","9bda03babb0f2c6aa9861eca95b33af06a650e2851cce4edcc1fc3abd8e7c2a1","5bd4987db7e6946bf2ca3f73e17d6f75e2d8217df63b2f7763ea9a6ebcaf9fed","2de72908e0a1ef97e4e06d8b1ba3dc0d76f580cdf36f96b5c919bea770b2805f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("9f22626232934970e4851467b7b746578f0f149984cd0e4e1a156b391727fac9","6d55f25222831cce73fd9a64a8e5a63b002522dc2637bd2704f77168c7c02d88","9bda03babb0f2c6aa9861eca95b33af06a650e2851cce4edcc1fc3abd8e7c2a1","5bd4987db7e6946bf2ca3f73e17d6f75e2d8217df63b2f7763ea9a6ebcaf9fed","2de72908e0a1ef97e4e06d8b1ba3dc0d76f580cdf36f96b5c919bea770b2805f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("9f22626232934970e4851467b7b746578f0f149984cd0e4e1a156b391727fac9","6d55f25222831cce73fd9a64a8e5a63b002522dc2637bd2704f77168c7c02d88","9bda03babb0f2c6aa9861eca95b33af06a650e2851cce4edcc1fc3abd8e7c2a1","5bd4987db7e6946bf2ca3f73e17d6f75e2d8217df63b2f7763ea9a6ebcaf9fed","2de72908e0a1ef97e4e06d8b1ba3dc0d76f580cdf36f96b5c919bea770b2805f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("9f22626232934970e4851467b7b746578f0f149984cd0e4e1a156b391727fac9","6d55f25222831cce73fd9a64a8e5a63b002522dc2637bd2704f77168c7c02d88","9bda03babb0f2c6aa9861eca95b33af06a650e2851cce4edcc1fc3abd8e7c2a1","5bd4987db7e6946bf2ca3f73e17d6f75e2d8217df63b2f7763ea9a6ebcaf9fed","2de72908e0a1ef97e4e06d8b1ba3dc0d76f580cdf36f96b5c919bea770b2805f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("9f22626232934970e4851467b7b746578f0f149984cd0e4e1a156b391727fac9","6d55f25222831cce73fd9a64a8e5a63b002522dc2637bd2704f77168c7c02d88","9bda03babb0f2c6aa9861eca95b33af06a650e2851cce4edcc1fc3abd8e7c2a1","5bd4987db7e6946bf2ca3f73e17d6f75e2d8217df63b2f7763ea9a6ebcaf9fed","2de72908e0a1ef97e4e06d8b1ba3dc0d76f580cdf36f96b5c919bea770b2805f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("9f22626232934970e4851467b7b746578f0f149984cd0e4e1a156b391727fac9","6d55f25222831cce73fd9a64a8e5a63b002522dc2637bd2704f77168c7c02d88","9bda03babb0f2c6aa9861eca95b33af06a650e2851cce4edcc1fc3abd8e7c2a1","5bd4987db7e6946bf2ca3f73e17d6f75e2d8217df63b2f7763ea9a6ebcaf9fed","2de72908e0a1ef97e4e06d8b1ba3dc0d76f580cdf36f96b5c919bea770b2805f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("9f22626232934970e4851467b7b746578f0f149984cd0e4e1a156b391727fac9","6d55f25222831cce73fd9a64a8e5a63b002522dc2637bd2704f77168c7c02d88","9bda03babb0f2c6aa9861eca95b33af06a650e2851cce4edcc1fc3abd8e7c2a1","5bd4987db7e6946bf2ca3f73e17d6f75e2d8217df63b2f7763ea9a6ebcaf9fed","2de72908e0a1ef97e4e06d8b1ba3dc0d76f580cdf36f96b5c919bea770b2805f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("9f22626232934970e4851467b7b746578f0f149984cd0e4e1a156b391727fac9","6d55f25222831cce73fd9a64a8e5a63b002522dc2637bd2704f77168c7c02d88","9bda03babb0f2c6aa9861eca95b33af06a650e2851cce4edcc1fc3abd8e7c2a1","5bd4987db7e6946bf2ca3f73e17d6f75e2d8217df63b2f7763ea9a6ebcaf9fed","2de72908e0a1ef97e4e06d8b1ba3dc0d76f580cdf36f96b5c919bea770b2805f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("9f22626232934970e4851467b7b746578f0f149984cd0e4e1a156b391727fac9","6d55f25222831cce73fd9a64a8e5a63b002522dc2637bd2704f77168c7c02d88","9bda03babb0f2c6aa9861eca95b33af06a650e2851cce4edcc1fc3abd8e7c2a1","5bd4987db7e6946bf2ca3f73e17d6f75e2d8217df63b2f7763ea9a6ebcaf9fed","2de72908e0a1ef97e4e06d8b1ba3dc0d76f580cdf36f96b5c919bea770b2805f")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("http://91.240.118.168/se/s.html","http://91.240.118.168/se/s.png","http://unifiedpharma.com/wp-content/5arxM/","http://hotelamerpalace.com/Fox-C404/LEPqPJpt4Gbr8BHAn/","https://connecticutsfinestmovers.com/Fox-C/mVwOqxT17gVWaE8E/","http://icfacn.com/runtime/n7qA2YStudp/","https://krezol-group.com:443/images/PmLGLKYeCBs5d/","http://ledcaopingdeng.com/wp-includes/Qq39yj7fpvk/","http://autodiscover.karlamejia.com/wp-admin/hcdnVlRIiwvTVrJjJEE/","https://crmweb.info:443/bitrix/rc9XjtwF/","http://accessunited-bank.com/admin/hzIgVwq8btak/","http://pigij.com/wp-admin/MVW5/","http://artanddesign.one/wp-content/uploads/A2cZL7/","http://strawberry.kids-singer.net/assets_c/WAdvNT84Dmu/","https://eleccom.shop:443/services/AEjSDj/","https://izocab.com/nashi-klienty/B5SC/","http://unifiedpharma.com/wp-content/5arxM/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://91.240.118.168/se/s.html","http://91.240.118.168/se/s.png","http://unifiedpharma.com/wp-content/5arxM/","http://hotelamerpalace.com/Fox-C404/LEPqPJpt4Gbr8BHAn/","https://connecticutsfinestmovers.com/Fox-C/mVwOqxT17gVWaE8E/","http://icfacn.com/runtime/n7qA2YStudp/","https://krezol-group.com:443/images/PmLGLKYeCBs5d/","http://ledcaopingdeng.com/wp-includes/Qq39yj7fpvk/","http://autodiscover.karlamejia.com/wp-admin/hcdnVlRIiwvTVrJjJEE/","https://crmweb.info:443/bitrix/rc9XjtwF/","http://accessunited-bank.com/admin/hzIgVwq8btak/","http://pigij.com/wp-admin/MVW5/","http://artanddesign.one/wp-content/uploads/A2cZL7/","http://strawberry.kids-singer.net/assets_c/WAdvNT84Dmu/","https://eleccom.shop:443/services/AEjSDj/","https://izocab.com/nashi-klienty/B5SC/","http://unifiedpharma.com/wp-content/5arxM/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://91.240.118.168/se/s.html","http://91.240.118.168/se/s.png","http://unifiedpharma.com/wp-content/5arxM/","http://hotelamerpalace.com/Fox-C404/LEPqPJpt4Gbr8BHAn/","https://connecticutsfinestmovers.com/Fox-C/mVwOqxT17gVWaE8E/","http://icfacn.com/runtime/n7qA2YStudp/","https://krezol-group.com:443/images/PmLGLKYeCBs5d/","http://ledcaopingdeng.com/wp-includes/Qq39yj7fpvk/","http://autodiscover.karlamejia.com/wp-admin/hcdnVlRIiwvTVrJjJEE/","https://crmweb.info:443/bitrix/rc9XjtwF/","http://accessunited-bank.com/admin/hzIgVwq8btak/","http://pigij.com/wp-admin/MVW5/","http://artanddesign.one/wp-content/uploads/A2cZL7/","http://strawberry.kids-singer.net/assets_c/WAdvNT84Dmu/","https://eleccom.shop:443/services/AEjSDj/","https://izocab.com/nashi-klienty/B5SC/","http://unifiedpharma.com/wp-content/5arxM/")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://91.240.118.168/se/s.html","http://91.240.118.168/se/s.png","http://unifiedpharma.com/wp-content/5arxM/","http://hotelamerpalace.com/Fox-C404/LEPqPJpt4Gbr8BHAn/","https://connecticutsfinestmovers.com/Fox-C/mVwOqxT17gVWaE8E/","http://icfacn.com/runtime/n7qA2YStudp/","https://krezol-group.com:443/images/PmLGLKYeCBs5d/","http://ledcaopingdeng.com/wp-includes/Qq39yj7fpvk/","http://autodiscover.karlamejia.com/wp-admin/hcdnVlRIiwvTVrJjJEE/","https://crmweb.info:443/bitrix/rc9XjtwF/","http://accessunited-bank.com/admin/hzIgVwq8btak/","http://pigij.com/wp-admin/MVW5/","http://artanddesign.one/wp-content/uploads/A2cZL7/","http://strawberry.kids-singer.net/assets_c/WAdvNT84Dmu/","https://eleccom.shop:443/services/AEjSDj/","https://izocab.com/nashi-klienty/B5SC/","http://unifiedpharma.com/wp-content/5arxM/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://91.240.118.168/se/s.html","http://91.240.118.168/se/s.png","http://unifiedpharma.com/wp-content/5arxM/","http://hotelamerpalace.com/Fox-C404/LEPqPJpt4Gbr8BHAn/","https://connecticutsfinestmovers.com/Fox-C/mVwOqxT17gVWaE8E/","http://icfacn.com/runtime/n7qA2YStudp/","https://krezol-group.com:443/images/PmLGLKYeCBs5d/","http://ledcaopingdeng.com/wp-includes/Qq39yj7fpvk/","http://autodiscover.karlamejia.com/wp-admin/hcdnVlRIiwvTVrJjJEE/","https://crmweb.info:443/bitrix/rc9XjtwF/","http://accessunited-bank.com/admin/hzIgVwq8btak/","http://pigij.com/wp-admin/MVW5/","http://artanddesign.one/wp-content/uploads/A2cZL7/","http://strawberry.kids-singer.net/assets_c/WAdvNT84Dmu/","https://eleccom.shop:443/services/AEjSDj/","https://izocab.com/nashi-klienty/B5SC/","http://unifiedpharma.com/wp-content/5arxM/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://91.240.118.168/se/s.html","http://91.240.118.168/se/s.png","http://unifiedpharma.com/wp-content/5arxM/","http://hotelamerpalace.com/Fox-C404/LEPqPJpt4Gbr8BHAn/","https://connecticutsfinestmovers.com/Fox-C/mVwOqxT17gVWaE8E/","http://icfacn.com/runtime/n7qA2YStudp/","https://krezol-group.com:443/images/PmLGLKYeCBs5d/","http://ledcaopingdeng.com/wp-includes/Qq39yj7fpvk/","http://autodiscover.karlamejia.com/wp-admin/hcdnVlRIiwvTVrJjJEE/","https://crmweb.info:443/bitrix/rc9XjtwF/","http://accessunited-bank.com/admin/hzIgVwq8btak/","http://pigij.com/wp-admin/MVW5/","http://artanddesign.one/wp-content/uploads/A2cZL7/","http://strawberry.kids-singer.net/assets_c/WAdvNT84Dmu/","https://eleccom.shop:443/services/AEjSDj/","https://izocab.com/nashi-klienty/B5SC/","http://unifiedpharma.com/wp-content/5arxM/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://91.240.118.168/se/s.html","http://91.240.118.168/se/s.png","http://unifiedpharma.com/wp-content/5arxM/","http://hotelamerpalace.com/Fox-C404/LEPqPJpt4Gbr8BHAn/","https://connecticutsfinestmovers.com/Fox-C/mVwOqxT17gVWaE8E/","http://icfacn.com/runtime/n7qA2YStudp/","https://krezol-group.com:443/images/PmLGLKYeCBs5d/","http://ledcaopingdeng.com/wp-includes/Qq39yj7fpvk/","http://autodiscover.karlamejia.com/wp-admin/hcdnVlRIiwvTVrJjJEE/","https://crmweb.info:443/bitrix/rc9XjtwF/","http://accessunited-bank.com/admin/hzIgVwq8btak/","http://pigij.com/wp-admin/MVW5/","http://artanddesign.one/wp-content/uploads/A2cZL7/","http://strawberry.kids-singer.net/assets_c/WAdvNT84Dmu/","https://eleccom.shop:443/services/AEjSDj/","https://izocab.com/nashi-klienty/B5SC/","http://unifiedpharma.com/wp-content/5arxM/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://91.240.118.168/se/s.html","http://91.240.118.168/se/s.png","http://unifiedpharma.com/wp-content/5arxM/","http://hotelamerpalace.com/Fox-C404/LEPqPJpt4Gbr8BHAn/","https://connecticutsfinestmovers.com/Fox-C/mVwOqxT17gVWaE8E/","http://icfacn.com/runtime/n7qA2YStudp/","https://krezol-group.com:443/images/PmLGLKYeCBs5d/","http://ledcaopingdeng.com/wp-includes/Qq39yj7fpvk/","http://autodiscover.karlamejia.com/wp-admin/hcdnVlRIiwvTVrJjJEE/","https://crmweb.info:443/bitrix/rc9XjtwF/","http://accessunited-bank.com/admin/hzIgVwq8btak/","http://pigij.com/wp-admin/MVW5/","http://artanddesign.one/wp-content/uploads/A2cZL7/","http://strawberry.kids-singer.net/assets_c/WAdvNT84Dmu/","https://eleccom.shop:443/services/AEjSDj/","https://izocab.com/nashi-klienty/B5SC/","http://unifiedpharma.com/wp-content/5arxM/")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://91.240.118.168/se/s.html","http://91.240.118.168/se/s.png","http://unifiedpharma.com/wp-content/5arxM/","http://hotelamerpalace.com/Fox-C404/LEPqPJpt4Gbr8BHAn/","https://connecticutsfinestmovers.com/Fox-C/mVwOqxT17gVWaE8E/","http://icfacn.com/runtime/n7qA2YStudp/","https://krezol-group.com:443/images/PmLGLKYeCBs5d/","http://ledcaopingdeng.com/wp-includes/Qq39yj7fpvk/","http://autodiscover.karlamejia.com/wp-admin/hcdnVlRIiwvTVrJjJEE/","https://crmweb.info:443/bitrix/rc9XjtwF/","http://accessunited-bank.com/admin/hzIgVwq8btak/","http://pigij.com/wp-admin/MVW5/","http://artanddesign.one/wp-content/uploads/A2cZL7/","http://strawberry.kids-singer.net/assets_c/WAdvNT84Dmu/","https://eleccom.shop:443/services/AEjSDj/","https://izocab.com/nashi-klienty/B5SC/","http://unifiedpharma.com/wp-content/5arxM/")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://91.240.118.168/se/s.html","http://91.240.118.168/se/s.png","http://unifiedpharma.com/wp-content/5arxM/","http://hotelamerpalace.com/Fox-C404/LEPqPJpt4Gbr8BHAn/","https://connecticutsfinestmovers.com/Fox-C/mVwOqxT17gVWaE8E/","http://icfacn.com/runtime/n7qA2YStudp/","https://krezol-group.com:443/images/PmLGLKYeCBs5d/","http://ledcaopingdeng.com/wp-includes/Qq39yj7fpvk/","http://autodiscover.karlamejia.com/wp-admin/hcdnVlRIiwvTVrJjJEE/","https://crmweb.info:443/bitrix/rc9XjtwF/","http://accessunited-bank.com/admin/hzIgVwq8btak/","http://pigij.com/wp-admin/MVW5/","http://artanddesign.one/wp-content/uploads/A2cZL7/","http://strawberry.kids-singer.net/assets_c/WAdvNT84Dmu/","https://eleccom.shop:443/services/AEjSDj/","https://izocab.com/nashi-klienty/B5SC/","http://unifiedpharma.com/wp-content/5arxM/")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://91.240.118.168/se/s.html","http://91.240.118.168/se/s.png","http://unifiedpharma.com/wp-content/5arxM/","http://hotelamerpalace.com/Fox-C404/LEPqPJpt4Gbr8BHAn/","https://connecticutsfinestmovers.com/Fox-C/mVwOqxT17gVWaE8E/","http://icfacn.com/runtime/n7qA2YStudp/","https://krezol-group.com:443/images/PmLGLKYeCBs5d/","http://ledcaopingdeng.com/wp-includes/Qq39yj7fpvk/","http://autodiscover.karlamejia.com/wp-admin/hcdnVlRIiwvTVrJjJEE/","https://crmweb.info:443/bitrix/rc9XjtwF/","http://accessunited-bank.com/admin/hzIgVwq8btak/","http://pigij.com/wp-admin/MVW5/","http://artanddesign.one/wp-content/uploads/A2cZL7/","http://strawberry.kids-singer.net/assets_c/WAdvNT84Dmu/","https://eleccom.shop:443/services/AEjSDj/","https://izocab.com/nashi-klienty/B5SC/","http://unifiedpharma.com/wp-content/5arxM/")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://91.240.118.168/se/s.html","http://91.240.118.168/se/s.png","http://unifiedpharma.com/wp-content/5arxM/","http://hotelamerpalace.com/Fox-C404/LEPqPJpt4Gbr8BHAn/","https://connecticutsfinestmovers.com/Fox-C/mVwOqxT17gVWaE8E/","http://icfacn.com/runtime/n7qA2YStudp/","https://krezol-group.com:443/images/PmLGLKYeCBs5d/","http://ledcaopingdeng.com/wp-includes/Qq39yj7fpvk/","http://autodiscover.karlamejia.com/wp-admin/hcdnVlRIiwvTVrJjJEE/","https://crmweb.info:443/bitrix/rc9XjtwF/","http://accessunited-bank.com/admin/hzIgVwq8btak/","http://pigij.com/wp-admin/MVW5/","http://artanddesign.one/wp-content/uploads/A2cZL7/","http://strawberry.kids-singer.net/assets_c/WAdvNT84Dmu/","https://eleccom.shop:443/services/AEjSDj/","https://izocab.com/nashi-klienty/B5SC/","http://unifiedpharma.com/wp-content/5arxM/")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://91.240.118.168/se/s.html","http://91.240.118.168/se/s.png","http://unifiedpharma.com/wp-content/5arxM/","http://hotelamerpalace.com/Fox-C404/LEPqPJpt4Gbr8BHAn/","https://connecticutsfinestmovers.com/Fox-C/mVwOqxT17gVWaE8E/","http://icfacn.com/runtime/n7qA2YStudp/","https://krezol-group.com:443/images/PmLGLKYeCBs5d/","http://ledcaopingdeng.com/wp-includes/Qq39yj7fpvk/","http://autodiscover.karlamejia.com/wp-admin/hcdnVlRIiwvTVrJjJEE/","https://crmweb.info:443/bitrix/rc9XjtwF/","http://accessunited-bank.com/admin/hzIgVwq8btak/","http://pigij.com/wp-admin/MVW5/","http://artanddesign.one/wp-content/uploads/A2cZL7/","http://strawberry.kids-singer.net/assets_c/WAdvNT84Dmu/","https://eleccom.shop:443/services/AEjSDj/","https://izocab.com/nashi-klienty/B5SC/","http://unifiedpharma.com/wp-content/5arxM/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://91.240.118.168/se/s.html","http://91.240.118.168/se/s.png","http://unifiedpharma.com/wp-content/5arxM/","http://hotelamerpalace.com/Fox-C404/LEPqPJpt4Gbr8BHAn/","https://connecticutsfinestmovers.com/Fox-C/mVwOqxT17gVWaE8E/","http://icfacn.com/runtime/n7qA2YStudp/","https://krezol-group.com:443/images/PmLGLKYeCBs5d/","http://ledcaopingdeng.com/wp-includes/Qq39yj7fpvk/","http://autodiscover.karlamejia.com/wp-admin/hcdnVlRIiwvTVrJjJEE/","https://crmweb.info:443/bitrix/rc9XjtwF/","http://accessunited-bank.com/admin/hzIgVwq8btak/","http://pigij.com/wp-admin/MVW5/","http://artanddesign.one/wp-content/uploads/A2cZL7/","http://strawberry.kids-singer.net/assets_c/WAdvNT84Dmu/","https://eleccom.shop:443/services/AEjSDj/","https://izocab.com/nashi-klienty/B5SC/","http://unifiedpharma.com/wp-content/5arxM/")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://91.240.118.168/se/s.html","http://91.240.118.168/se/s.png","http://unifiedpharma.com/wp-content/5arxM/","http://hotelamerpalace.com/Fox-C404/LEPqPJpt4Gbr8BHAn/","https://connecticutsfinestmovers.com/Fox-C/mVwOqxT17gVWaE8E/","http://icfacn.com/runtime/n7qA2YStudp/","https://krezol-group.com:443/images/PmLGLKYeCBs5d/","http://ledcaopingdeng.com/wp-includes/Qq39yj7fpvk/","http://autodiscover.karlamejia.com/wp-admin/hcdnVlRIiwvTVrJjJEE/","https://crmweb.info:443/bitrix/rc9XjtwF/","http://accessunited-bank.com/admin/hzIgVwq8btak/","http://pigij.com/wp-admin/MVW5/","http://artanddesign.one/wp-content/uploads/A2cZL7/","http://strawberry.kids-singer.net/assets_c/WAdvNT84Dmu/","https://eleccom.shop:443/services/AEjSDj/","https://izocab.com/nashi-klienty/B5SC/","http://unifiedpharma.com/wp-content/5arxM/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://91.240.118.168/se/s.html","http://91.240.118.168/se/s.png","http://unifiedpharma.com/wp-content/5arxM/","http://hotelamerpalace.com/Fox-C404/LEPqPJpt4Gbr8BHAn/","https://connecticutsfinestmovers.com/Fox-C/mVwOqxT17gVWaE8E/","http://icfacn.com/runtime/n7qA2YStudp/","https://krezol-group.com:443/images/PmLGLKYeCBs5d/","http://ledcaopingdeng.com/wp-includes/Qq39yj7fpvk/","http://autodiscover.karlamejia.com/wp-admin/hcdnVlRIiwvTVrJjJEE/","https://crmweb.info:443/bitrix/rc9XjtwF/","http://accessunited-bank.com/admin/hzIgVwq8btak/","http://pigij.com/wp-admin/MVW5/","http://artanddesign.one/wp-content/uploads/A2cZL7/","http://strawberry.kids-singer.net/assets_c/WAdvNT84Dmu/","https://eleccom.shop:443/services/AEjSDj/","https://izocab.com/nashi-klienty/B5SC/","http://unifiedpharma.com/wp-content/5arxM/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://91.240.118.168/se/s.html","http://91.240.118.168/se/s.png","http://unifiedpharma.com/wp-content/5arxM/","http://hotelamerpalace.com/Fox-C404/LEPqPJpt4Gbr8BHAn/","https://connecticutsfinestmovers.com/Fox-C/mVwOqxT17gVWaE8E/","http://icfacn.com/runtime/n7qA2YStudp/","https://krezol-group.com:443/images/PmLGLKYeCBs5d/","http://ledcaopingdeng.com/wp-includes/Qq39yj7fpvk/","http://autodiscover.karlamejia.com/wp-admin/hcdnVlRIiwvTVrJjJEE/","https://crmweb.info:443/bitrix/rc9XjtwF/","http://accessunited-bank.com/admin/hzIgVwq8btak/","http://pigij.com/wp-admin/MVW5/","http://artanddesign.one/wp-content/uploads/A2cZL7/","http://strawberry.kids-singer.net/assets_c/WAdvNT84Dmu/","https://eleccom.shop:443/services/AEjSDj/","https://izocab.com/nashi-klienty/B5SC/","http://unifiedpharma.com/wp-content/5arxM/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://91.240.118.168/se/s.html","http://91.240.118.168/se/s.png","http://unifiedpharma.com/wp-content/5arxM/","http://hotelamerpalace.com/Fox-C404/LEPqPJpt4Gbr8BHAn/","https://connecticutsfinestmovers.com/Fox-C/mVwOqxT17gVWaE8E/","http://icfacn.com/runtime/n7qA2YStudp/","https://krezol-group.com:443/images/PmLGLKYeCBs5d/","http://ledcaopingdeng.com/wp-includes/Qq39yj7fpvk/","http://autodiscover.karlamejia.com/wp-admin/hcdnVlRIiwvTVrJjJEE/","https://crmweb.info:443/bitrix/rc9XjtwF/","http://accessunited-bank.com/admin/hzIgVwq8btak/","http://pigij.com/wp-admin/MVW5/","http://artanddesign.one/wp-content/uploads/A2cZL7/","http://strawberry.kids-singer.net/assets_c/WAdvNT84Dmu/","https://eleccom.shop:443/services/AEjSDj/","https://izocab.com/nashi-klienty/B5SC/","http://unifiedpharma.com/wp-content/5arxM/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://91.240.118.168/se/s.html","http://91.240.118.168/se/s.png","http://unifiedpharma.com/wp-content/5arxM/","http://hotelamerpalace.com/Fox-C404/LEPqPJpt4Gbr8BHAn/","https://connecticutsfinestmovers.com/Fox-C/mVwOqxT17gVWaE8E/","http://icfacn.com/runtime/n7qA2YStudp/","https://krezol-group.com:443/images/PmLGLKYeCBs5d/","http://ledcaopingdeng.com/wp-includes/Qq39yj7fpvk/","http://autodiscover.karlamejia.com/wp-admin/hcdnVlRIiwvTVrJjJEE/","https://crmweb.info:443/bitrix/rc9XjtwF/","http://accessunited-bank.com/admin/hzIgVwq8btak/","http://pigij.com/wp-admin/MVW5/","http://artanddesign.one/wp-content/uploads/A2cZL7/","http://strawberry.kids-singer.net/assets_c/WAdvNT84Dmu/","https://eleccom.shop:443/services/AEjSDj/","https://izocab.com/nashi-klienty/B5SC/","http://unifiedpharma.com/wp-content/5arxM/")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://91.240.118.168/se/s.html","http://91.240.118.168/se/s.png","http://unifiedpharma.com/wp-content/5arxM/","http://hotelamerpalace.com/Fox-C404/LEPqPJpt4Gbr8BHAn/","https://connecticutsfinestmovers.com/Fox-C/mVwOqxT17gVWaE8E/","http://icfacn.com/runtime/n7qA2YStudp/","https://krezol-group.com:443/images/PmLGLKYeCBs5d/","http://ledcaopingdeng.com/wp-includes/Qq39yj7fpvk/","http://autodiscover.karlamejia.com/wp-admin/hcdnVlRIiwvTVrJjJEE/","https://crmweb.info:443/bitrix/rc9XjtwF/","http://accessunited-bank.com/admin/hzIgVwq8btak/","http://pigij.com/wp-admin/MVW5/","http://artanddesign.one/wp-content/uploads/A2cZL7/","http://strawberry.kids-singer.net/assets_c/WAdvNT84Dmu/","https://eleccom.shop:443/services/AEjSDj/","https://izocab.com/nashi-klienty/B5SC/","http://unifiedpharma.com/wp-content/5arxM/")
