index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("6852b1102b0efc7ceb47520080fca57eb1a647c4e1c7ff3a40da9757c92ebaab","b64cb7dbf62eb8b9539cc1d7901a487a3fd7de9b","861f7deb8926bb0c6d11f8e81d27b406","fd5f076e99fd2ccb5f8aef5b4f69a8c2bf231808b2480f9d31955154a1509552","47560b0a57913d01614256e9150b6e6f5e758250","585fd7777074089aaa3c615169c18170","249d0f41d58fe90cf17bedc8d0c39c6c88e33251","d5aaa3b923dd8ede43e4cd9eea642d24f3d9be03273d5f97902bc615849af208")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("6852b1102b0efc7ceb47520080fca57eb1a647c4e1c7ff3a40da9757c92ebaab","b64cb7dbf62eb8b9539cc1d7901a487a3fd7de9b","861f7deb8926bb0c6d11f8e81d27b406","fd5f076e99fd2ccb5f8aef5b4f69a8c2bf231808b2480f9d31955154a1509552","47560b0a57913d01614256e9150b6e6f5e758250","585fd7777074089aaa3c615169c18170","249d0f41d58fe90cf17bedc8d0c39c6c88e33251","d5aaa3b923dd8ede43e4cd9eea642d24f3d9be03273d5f97902bc615849af208")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("6852b1102b0efc7ceb47520080fca57eb1a647c4e1c7ff3a40da9757c92ebaab","b64cb7dbf62eb8b9539cc1d7901a487a3fd7de9b","861f7deb8926bb0c6d11f8e81d27b406","fd5f076e99fd2ccb5f8aef5b4f69a8c2bf231808b2480f9d31955154a1509552","47560b0a57913d01614256e9150b6e6f5e758250","585fd7777074089aaa3c615169c18170","249d0f41d58fe90cf17bedc8d0c39c6c88e33251","d5aaa3b923dd8ede43e4cd9eea642d24f3d9be03273d5f97902bc615849af208")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("6852b1102b0efc7ceb47520080fca57eb1a647c4e1c7ff3a40da9757c92ebaab","b64cb7dbf62eb8b9539cc1d7901a487a3fd7de9b","861f7deb8926bb0c6d11f8e81d27b406","fd5f076e99fd2ccb5f8aef5b4f69a8c2bf231808b2480f9d31955154a1509552","47560b0a57913d01614256e9150b6e6f5e758250","585fd7777074089aaa3c615169c18170","249d0f41d58fe90cf17bedc8d0c39c6c88e33251","d5aaa3b923dd8ede43e4cd9eea642d24f3d9be03273d5f97902bc615849af208")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("6852b1102b0efc7ceb47520080fca57eb1a647c4e1c7ff3a40da9757c92ebaab","b64cb7dbf62eb8b9539cc1d7901a487a3fd7de9b","861f7deb8926bb0c6d11f8e81d27b406","fd5f076e99fd2ccb5f8aef5b4f69a8c2bf231808b2480f9d31955154a1509552","47560b0a57913d01614256e9150b6e6f5e758250","585fd7777074089aaa3c615169c18170","249d0f41d58fe90cf17bedc8d0c39c6c88e33251","d5aaa3b923dd8ede43e4cd9eea642d24f3d9be03273d5f97902bc615849af208")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("6852b1102b0efc7ceb47520080fca57eb1a647c4e1c7ff3a40da9757c92ebaab","b64cb7dbf62eb8b9539cc1d7901a487a3fd7de9b","861f7deb8926bb0c6d11f8e81d27b406","fd5f076e99fd2ccb5f8aef5b4f69a8c2bf231808b2480f9d31955154a1509552","47560b0a57913d01614256e9150b6e6f5e758250","585fd7777074089aaa3c615169c18170","249d0f41d58fe90cf17bedc8d0c39c6c88e33251","d5aaa3b923dd8ede43e4cd9eea642d24f3d9be03273d5f97902bc615849af208")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("6852b1102b0efc7ceb47520080fca57eb1a647c4e1c7ff3a40da9757c92ebaab","b64cb7dbf62eb8b9539cc1d7901a487a3fd7de9b","861f7deb8926bb0c6d11f8e81d27b406","fd5f076e99fd2ccb5f8aef5b4f69a8c2bf231808b2480f9d31955154a1509552","47560b0a57913d01614256e9150b6e6f5e758250","585fd7777074089aaa3c615169c18170","249d0f41d58fe90cf17bedc8d0c39c6c88e33251","d5aaa3b923dd8ede43e4cd9eea642d24f3d9be03273d5f97902bc615849af208")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("6852b1102b0efc7ceb47520080fca57eb1a647c4e1c7ff3a40da9757c92ebaab","b64cb7dbf62eb8b9539cc1d7901a487a3fd7de9b","861f7deb8926bb0c6d11f8e81d27b406","fd5f076e99fd2ccb5f8aef5b4f69a8c2bf231808b2480f9d31955154a1509552","47560b0a57913d01614256e9150b6e6f5e758250","585fd7777074089aaa3c615169c18170","249d0f41d58fe90cf17bedc8d0c39c6c88e33251","d5aaa3b923dd8ede43e4cd9eea642d24f3d9be03273d5f97902bc615849af208")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("6852b1102b0efc7ceb47520080fca57eb1a647c4e1c7ff3a40da9757c92ebaab","b64cb7dbf62eb8b9539cc1d7901a487a3fd7de9b","861f7deb8926bb0c6d11f8e81d27b406","fd5f076e99fd2ccb5f8aef5b4f69a8c2bf231808b2480f9d31955154a1509552","47560b0a57913d01614256e9150b6e6f5e758250","585fd7777074089aaa3c615169c18170","249d0f41d58fe90cf17bedc8d0c39c6c88e33251","d5aaa3b923dd8ede43e4cd9eea642d24f3d9be03273d5f97902bc615849af208")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("6852b1102b0efc7ceb47520080fca57eb1a647c4e1c7ff3a40da9757c92ebaab","b64cb7dbf62eb8b9539cc1d7901a487a3fd7de9b","861f7deb8926bb0c6d11f8e81d27b406","fd5f076e99fd2ccb5f8aef5b4f69a8c2bf231808b2480f9d31955154a1509552","47560b0a57913d01614256e9150b6e6f5e758250","585fd7777074089aaa3c615169c18170","249d0f41d58fe90cf17bedc8d0c39c6c88e33251","d5aaa3b923dd8ede43e4cd9eea642d24f3d9be03273d5f97902bc615849af208")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("6852b1102b0efc7ceb47520080fca57eb1a647c4e1c7ff3a40da9757c92ebaab","b64cb7dbf62eb8b9539cc1d7901a487a3fd7de9b","861f7deb8926bb0c6d11f8e81d27b406","fd5f076e99fd2ccb5f8aef5b4f69a8c2bf231808b2480f9d31955154a1509552","47560b0a57913d01614256e9150b6e6f5e758250","585fd7777074089aaa3c615169c18170","249d0f41d58fe90cf17bedc8d0c39c6c88e33251","d5aaa3b923dd8ede43e4cd9eea642d24f3d9be03273d5f97902bc615849af208")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("6852b1102b0efc7ceb47520080fca57eb1a647c4e1c7ff3a40da9757c92ebaab","b64cb7dbf62eb8b9539cc1d7901a487a3fd7de9b","861f7deb8926bb0c6d11f8e81d27b406","fd5f076e99fd2ccb5f8aef5b4f69a8c2bf231808b2480f9d31955154a1509552","47560b0a57913d01614256e9150b6e6f5e758250","585fd7777074089aaa3c615169c18170","249d0f41d58fe90cf17bedc8d0c39c6c88e33251","d5aaa3b923dd8ede43e4cd9eea642d24f3d9be03273d5f97902bc615849af208")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("6852b1102b0efc7ceb47520080fca57eb1a647c4e1c7ff3a40da9757c92ebaab","b64cb7dbf62eb8b9539cc1d7901a487a3fd7de9b","861f7deb8926bb0c6d11f8e81d27b406","fd5f076e99fd2ccb5f8aef5b4f69a8c2bf231808b2480f9d31955154a1509552","47560b0a57913d01614256e9150b6e6f5e758250","585fd7777074089aaa3c615169c18170","249d0f41d58fe90cf17bedc8d0c39c6c88e33251","d5aaa3b923dd8ede43e4cd9eea642d24f3d9be03273d5f97902bc615849af208")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("6852b1102b0efc7ceb47520080fca57eb1a647c4e1c7ff3a40da9757c92ebaab","b64cb7dbf62eb8b9539cc1d7901a487a3fd7de9b","861f7deb8926bb0c6d11f8e81d27b406","fd5f076e99fd2ccb5f8aef5b4f69a8c2bf231808b2480f9d31955154a1509552","47560b0a57913d01614256e9150b6e6f5e758250","585fd7777074089aaa3c615169c18170","249d0f41d58fe90cf17bedc8d0c39c6c88e33251","d5aaa3b923dd8ede43e4cd9eea642d24f3d9be03273d5f97902bc615849af208")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("6852b1102b0efc7ceb47520080fca57eb1a647c4e1c7ff3a40da9757c92ebaab","b64cb7dbf62eb8b9539cc1d7901a487a3fd7de9b","861f7deb8926bb0c6d11f8e81d27b406","fd5f076e99fd2ccb5f8aef5b4f69a8c2bf231808b2480f9d31955154a1509552","47560b0a57913d01614256e9150b6e6f5e758250","585fd7777074089aaa3c615169c18170","249d0f41d58fe90cf17bedc8d0c39c6c88e33251","d5aaa3b923dd8ede43e4cd9eea642d24f3d9be03273d5f97902bc615849af208")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("6852b1102b0efc7ceb47520080fca57eb1a647c4e1c7ff3a40da9757c92ebaab","b64cb7dbf62eb8b9539cc1d7901a487a3fd7de9b","861f7deb8926bb0c6d11f8e81d27b406","fd5f076e99fd2ccb5f8aef5b4f69a8c2bf231808b2480f9d31955154a1509552","47560b0a57913d01614256e9150b6e6f5e758250","585fd7777074089aaa3c615169c18170","249d0f41d58fe90cf17bedc8d0c39c6c88e33251","d5aaa3b923dd8ede43e4cd9eea642d24f3d9be03273d5f97902bc615849af208")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("6852b1102b0efc7ceb47520080fca57eb1a647c4e1c7ff3a40da9757c92ebaab","b64cb7dbf62eb8b9539cc1d7901a487a3fd7de9b","861f7deb8926bb0c6d11f8e81d27b406","fd5f076e99fd2ccb5f8aef5b4f69a8c2bf231808b2480f9d31955154a1509552","47560b0a57913d01614256e9150b6e6f5e758250","585fd7777074089aaa3c615169c18170","249d0f41d58fe90cf17bedc8d0c39c6c88e33251","d5aaa3b923dd8ede43e4cd9eea642d24f3d9be03273d5f97902bc615849af208")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("6852b1102b0efc7ceb47520080fca57eb1a647c4e1c7ff3a40da9757c92ebaab","b64cb7dbf62eb8b9539cc1d7901a487a3fd7de9b","861f7deb8926bb0c6d11f8e81d27b406","fd5f076e99fd2ccb5f8aef5b4f69a8c2bf231808b2480f9d31955154a1509552","47560b0a57913d01614256e9150b6e6f5e758250","585fd7777074089aaa3c615169c18170","249d0f41d58fe90cf17bedc8d0c39c6c88e33251","d5aaa3b923dd8ede43e4cd9eea642d24f3d9be03273d5f97902bc615849af208")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("6852b1102b0efc7ceb47520080fca57eb1a647c4e1c7ff3a40da9757c92ebaab","b64cb7dbf62eb8b9539cc1d7901a487a3fd7de9b","861f7deb8926bb0c6d11f8e81d27b406","fd5f076e99fd2ccb5f8aef5b4f69a8c2bf231808b2480f9d31955154a1509552","47560b0a57913d01614256e9150b6e6f5e758250","585fd7777074089aaa3c615169c18170","249d0f41d58fe90cf17bedc8d0c39c6c88e33251","d5aaa3b923dd8ede43e4cd9eea642d24f3d9be03273d5f97902bc615849af208")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("6852b1102b0efc7ceb47520080fca57eb1a647c4e1c7ff3a40da9757c92ebaab","b64cb7dbf62eb8b9539cc1d7901a487a3fd7de9b","861f7deb8926bb0c6d11f8e81d27b406","fd5f076e99fd2ccb5f8aef5b4f69a8c2bf231808b2480f9d31955154a1509552","47560b0a57913d01614256e9150b6e6f5e758250","585fd7777074089aaa3c615169c18170","249d0f41d58fe90cf17bedc8d0c39c6c88e33251","d5aaa3b923dd8ede43e4cd9eea642d24f3d9be03273d5f97902bc615849af208")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("6852b1102b0efc7ceb47520080fca57eb1a647c4e1c7ff3a40da9757c92ebaab","b64cb7dbf62eb8b9539cc1d7901a487a3fd7de9b","861f7deb8926bb0c6d11f8e81d27b406","fd5f076e99fd2ccb5f8aef5b4f69a8c2bf231808b2480f9d31955154a1509552","47560b0a57913d01614256e9150b6e6f5e758250","585fd7777074089aaa3c615169c18170","249d0f41d58fe90cf17bedc8d0c39c6c88e33251","d5aaa3b923dd8ede43e4cd9eea642d24f3d9be03273d5f97902bc615849af208")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("6852b1102b0efc7ceb47520080fca57eb1a647c4e1c7ff3a40da9757c92ebaab","b64cb7dbf62eb8b9539cc1d7901a487a3fd7de9b","861f7deb8926bb0c6d11f8e81d27b406","fd5f076e99fd2ccb5f8aef5b4f69a8c2bf231808b2480f9d31955154a1509552","47560b0a57913d01614256e9150b6e6f5e758250","585fd7777074089aaa3c615169c18170","249d0f41d58fe90cf17bedc8d0c39c6c88e33251","d5aaa3b923dd8ede43e4cd9eea642d24f3d9be03273d5f97902bc615849af208")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("6852b1102b0efc7ceb47520080fca57eb1a647c4e1c7ff3a40da9757c92ebaab","b64cb7dbf62eb8b9539cc1d7901a487a3fd7de9b","861f7deb8926bb0c6d11f8e81d27b406","fd5f076e99fd2ccb5f8aef5b4f69a8c2bf231808b2480f9d31955154a1509552","47560b0a57913d01614256e9150b6e6f5e758250","585fd7777074089aaa3c615169c18170","249d0f41d58fe90cf17bedc8d0c39c6c88e33251","d5aaa3b923dd8ede43e4cd9eea642d24f3d9be03273d5f97902bc615849af208")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("6852b1102b0efc7ceb47520080fca57eb1a647c4e1c7ff3a40da9757c92ebaab","b64cb7dbf62eb8b9539cc1d7901a487a3fd7de9b","861f7deb8926bb0c6d11f8e81d27b406","fd5f076e99fd2ccb5f8aef5b4f69a8c2bf231808b2480f9d31955154a1509552","47560b0a57913d01614256e9150b6e6f5e758250","585fd7777074089aaa3c615169c18170","249d0f41d58fe90cf17bedc8d0c39c6c88e33251","d5aaa3b923dd8ede43e4cd9eea642d24f3d9be03273d5f97902bc615849af208")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("6852b1102b0efc7ceb47520080fca57eb1a647c4e1c7ff3a40da9757c92ebaab","b64cb7dbf62eb8b9539cc1d7901a487a3fd7de9b","861f7deb8926bb0c6d11f8e81d27b406","fd5f076e99fd2ccb5f8aef5b4f69a8c2bf231808b2480f9d31955154a1509552","47560b0a57913d01614256e9150b6e6f5e758250","585fd7777074089aaa3c615169c18170","249d0f41d58fe90cf17bedc8d0c39c6c88e33251","d5aaa3b923dd8ede43e4cd9eea642d24f3d9be03273d5f97902bc615849af208")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("6852b1102b0efc7ceb47520080fca57eb1a647c4e1c7ff3a40da9757c92ebaab","b64cb7dbf62eb8b9539cc1d7901a487a3fd7de9b","861f7deb8926bb0c6d11f8e81d27b406","fd5f076e99fd2ccb5f8aef5b4f69a8c2bf231808b2480f9d31955154a1509552","47560b0a57913d01614256e9150b6e6f5e758250","585fd7777074089aaa3c615169c18170","249d0f41d58fe90cf17bedc8d0c39c6c88e33251","d5aaa3b923dd8ede43e4cd9eea642d24f3d9be03273d5f97902bc615849af208")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("6852b1102b0efc7ceb47520080fca57eb1a647c4e1c7ff3a40da9757c92ebaab","b64cb7dbf62eb8b9539cc1d7901a487a3fd7de9b","861f7deb8926bb0c6d11f8e81d27b406","fd5f076e99fd2ccb5f8aef5b4f69a8c2bf231808b2480f9d31955154a1509552","47560b0a57913d01614256e9150b6e6f5e758250","585fd7777074089aaa3c615169c18170","249d0f41d58fe90cf17bedc8d0c39c6c88e33251","d5aaa3b923dd8ede43e4cd9eea642d24f3d9be03273d5f97902bc615849af208")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("6852b1102b0efc7ceb47520080fca57eb1a647c4e1c7ff3a40da9757c92ebaab","b64cb7dbf62eb8b9539cc1d7901a487a3fd7de9b","861f7deb8926bb0c6d11f8e81d27b406","fd5f076e99fd2ccb5f8aef5b4f69a8c2bf231808b2480f9d31955154a1509552","47560b0a57913d01614256e9150b6e6f5e758250","585fd7777074089aaa3c615169c18170","249d0f41d58fe90cf17bedc8d0c39c6c88e33251","d5aaa3b923dd8ede43e4cd9eea642d24f3d9be03273d5f97902bc615849af208")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("6852b1102b0efc7ceb47520080fca57eb1a647c4e1c7ff3a40da9757c92ebaab","b64cb7dbf62eb8b9539cc1d7901a487a3fd7de9b","861f7deb8926bb0c6d11f8e81d27b406","fd5f076e99fd2ccb5f8aef5b4f69a8c2bf231808b2480f9d31955154a1509552","47560b0a57913d01614256e9150b6e6f5e758250","585fd7777074089aaa3c615169c18170","249d0f41d58fe90cf17bedc8d0c39c6c88e33251","d5aaa3b923dd8ede43e4cd9eea642d24f3d9be03273d5f97902bc615849af208")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("6852b1102b0efc7ceb47520080fca57eb1a647c4e1c7ff3a40da9757c92ebaab","b64cb7dbf62eb8b9539cc1d7901a487a3fd7de9b","861f7deb8926bb0c6d11f8e81d27b406","fd5f076e99fd2ccb5f8aef5b4f69a8c2bf231808b2480f9d31955154a1509552","47560b0a57913d01614256e9150b6e6f5e758250","585fd7777074089aaa3c615169c18170","249d0f41d58fe90cf17bedc8d0c39c6c88e33251","d5aaa3b923dd8ede43e4cd9eea642d24f3d9be03273d5f97902bc615849af208")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("6852b1102b0efc7ceb47520080fca57eb1a647c4e1c7ff3a40da9757c92ebaab","b64cb7dbf62eb8b9539cc1d7901a487a3fd7de9b","861f7deb8926bb0c6d11f8e81d27b406","fd5f076e99fd2ccb5f8aef5b4f69a8c2bf231808b2480f9d31955154a1509552","47560b0a57913d01614256e9150b6e6f5e758250","585fd7777074089aaa3c615169c18170","249d0f41d58fe90cf17bedc8d0c39c6c88e33251","d5aaa3b923dd8ede43e4cd9eea642d24f3d9be03273d5f97902bc615849af208")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("6852b1102b0efc7ceb47520080fca57eb1a647c4e1c7ff3a40da9757c92ebaab","b64cb7dbf62eb8b9539cc1d7901a487a3fd7de9b","861f7deb8926bb0c6d11f8e81d27b406","fd5f076e99fd2ccb5f8aef5b4f69a8c2bf231808b2480f9d31955154a1509552","47560b0a57913d01614256e9150b6e6f5e758250","585fd7777074089aaa3c615169c18170","249d0f41d58fe90cf17bedc8d0c39c6c88e33251","d5aaa3b923dd8ede43e4cd9eea642d24f3d9be03273d5f97902bc615849af208")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="165.22.195.35" AND destinationport=443 OR destinationaddress="165.227.63.241" AND destinationport=443 OR destinationaddress="164.90.149.104" AND destinationport=9022 OR destinationaddress="164.90.149.104" AND destinationport=9021 OR destinationaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Endpoint Management Systems" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="165.22.195.35" AND sourceport=443 OR sourceaddress="165.227.63.241" AND sourceport=443 OR sourceaddress="164.90.149.104" AND sourceport=9022 OR sourceaddress="164.90.149.104" AND sourceport=9021 OR sourceaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Endpoint Management Systems" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="165.22.195.35" AND sourceport=443 OR translatedipaddress="165.227.63.241" AND sourceport=443 OR translatedipaddress="164.90.149.104" AND sourceport=9022 OR translatedipaddress="164.90.149.104" AND sourceport=9021 OR translatedipaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationtranslatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationtranslatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationtranslatedport=4447)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND translatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND translatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND translatedport=4447)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="165.22.195.35" AND destinationport=443 OR destinationaddress="165.227.63.241" AND destinationport=443 OR destinationaddress="164.90.149.104" AND destinationport=9022 OR destinationaddress="164.90.149.104" AND destinationport=9021 OR destinationaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="165.22.195.35" AND sourceport=443 OR sourceaddress="165.227.63.241" AND sourceport=443 OR sourceaddress="164.90.149.104" AND sourceport=9022 OR sourceaddress="164.90.149.104" AND sourceport=9021 OR sourceaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="165.22.195.35" AND sourceport=443 OR translatedipaddress="165.227.63.241" AND sourceport=443 OR translatedipaddress="164.90.149.104" AND sourceport=9022 OR translatedipaddress="164.90.149.104" AND sourceport=9021 OR translatedipaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationtranslatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationtranslatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationtranslatedport=4447)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND translatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND translatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND translatedport=4447)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="165.22.195.35" AND destinationport=443 OR destinationaddress="165.227.63.241" AND destinationport=443 OR destinationaddress="164.90.149.104" AND destinationport=9022 OR destinationaddress="164.90.149.104" AND destinationport=9021 OR destinationaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="165.22.195.35" AND sourceport=443 OR sourceaddress="165.227.63.241" AND sourceport=443 OR sourceaddress="164.90.149.104" AND sourceport=9022 OR sourceaddress="164.90.149.104" AND sourceport=9021 OR sourceaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="165.22.195.35" AND sourceport=443 OR translatedipaddress="165.227.63.241" AND sourceport=443 OR translatedipaddress="164.90.149.104" AND sourceport=9022 OR translatedipaddress="164.90.149.104" AND sourceport=9021 OR translatedipaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationtranslatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationtranslatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationtranslatedport=4447)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND translatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND translatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND translatedport=4447)
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="165.22.195.35" AND destinationport=443 OR destinationaddress="165.227.63.241" AND destinationport=443 OR destinationaddress="164.90.149.104" AND destinationport=9022 OR destinationaddress="164.90.149.104" AND destinationport=9021 OR destinationaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="165.22.195.35" AND sourceport=443 OR sourceaddress="165.227.63.241" AND sourceport=443 OR sourceaddress="164.90.149.104" AND sourceport=9022 OR sourceaddress="164.90.149.104" AND sourceport=9021 OR sourceaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="165.22.195.35" AND sourceport=443 OR translatedipaddress="165.227.63.241" AND sourceport=443 OR translatedipaddress="164.90.149.104" AND sourceport=9022 OR translatedipaddress="164.90.149.104" AND sourceport=9021 OR translatedipaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationtranslatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationtranslatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationtranslatedport=4447)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND translatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND translatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND translatedport=4447)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="165.22.195.35" AND destinationport=443 OR destinationaddress="165.227.63.241" AND destinationport=443 OR destinationaddress="164.90.149.104" AND destinationport=9022 OR destinationaddress="164.90.149.104" AND destinationport=9021 OR destinationaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="165.22.195.35" AND sourceport=443 OR sourceaddress="165.227.63.241" AND sourceport=443 OR sourceaddress="164.90.149.104" AND sourceport=9022 OR sourceaddress="164.90.149.104" AND sourceport=9021 OR sourceaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="165.22.195.35" AND sourceport=443 OR translatedipaddress="165.227.63.241" AND sourceport=443 OR translatedipaddress="164.90.149.104" AND sourceport=9022 OR translatedipaddress="164.90.149.104" AND sourceport=9021 OR translatedipaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationtranslatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationtranslatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationtranslatedport=4447)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND translatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND translatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND translatedport=4447)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="165.22.195.35" AND destinationport=443 OR destinationaddress="165.227.63.241" AND destinationport=443 OR destinationaddress="164.90.149.104" AND destinationport=9022 OR destinationaddress="164.90.149.104" AND destinationport=9021 OR destinationaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="165.22.195.35" AND sourceport=443 OR sourceaddress="165.227.63.241" AND sourceport=443 OR sourceaddress="164.90.149.104" AND sourceport=9022 OR sourceaddress="164.90.149.104" AND sourceport=9021 OR sourceaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="165.22.195.35" AND sourceport=443 OR translatedipaddress="165.227.63.241" AND sourceport=443 OR translatedipaddress="164.90.149.104" AND sourceport=9022 OR translatedipaddress="164.90.149.104" AND sourceport=9021 OR translatedipaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationtranslatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationtranslatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationtranslatedport=4447)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND translatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND translatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND translatedport=4447)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="165.22.195.35" AND destinationport=443 OR destinationaddress="165.227.63.241" AND destinationport=443 OR destinationaddress="164.90.149.104" AND destinationport=9022 OR destinationaddress="164.90.149.104" AND destinationport=9021 OR destinationaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="165.22.195.35" AND sourceport=443 OR sourceaddress="165.227.63.241" AND sourceport=443 OR sourceaddress="164.90.149.104" AND sourceport=9022 OR sourceaddress="164.90.149.104" AND sourceport=9021 OR sourceaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="165.22.195.35" AND sourceport=443 OR translatedipaddress="165.227.63.241" AND sourceport=443 OR translatedipaddress="164.90.149.104" AND sourceport=9022 OR translatedipaddress="164.90.149.104" AND sourceport=9021 OR translatedipaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationtranslatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationtranslatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationtranslatedport=4447)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND translatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND translatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND translatedport=4447)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="165.22.195.35" AND destinationport=443 OR destinationaddress="165.227.63.241" AND destinationport=443 OR destinationaddress="164.90.149.104" AND destinationport=9022 OR destinationaddress="164.90.149.104" AND destinationport=9021 OR destinationaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="165.22.195.35" AND sourceport=443 OR sourceaddress="165.227.63.241" AND sourceport=443 OR sourceaddress="164.90.149.104" AND sourceport=9022 OR sourceaddress="164.90.149.104" AND sourceport=9021 OR sourceaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="165.22.195.35" AND sourceport=443 OR translatedipaddress="165.227.63.241" AND sourceport=443 OR translatedipaddress="164.90.149.104" AND sourceport=9022 OR translatedipaddress="164.90.149.104" AND sourceport=9021 OR translatedipaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationtranslatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationtranslatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationtranslatedport=4447)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND translatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND translatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND translatedport=4447)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="165.22.195.35" AND destinationport=443 OR destinationaddress="165.227.63.241" AND destinationport=443 OR destinationaddress="164.90.149.104" AND destinationport=9022 OR destinationaddress="164.90.149.104" AND destinationport=9021 OR destinationaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="165.22.195.35" AND sourceport=443 OR sourceaddress="165.227.63.241" AND sourceport=443 OR sourceaddress="164.90.149.104" AND sourceport=9022 OR sourceaddress="164.90.149.104" AND sourceport=9021 OR sourceaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="165.22.195.35" AND sourceport=443 OR translatedipaddress="165.227.63.241" AND sourceport=443 OR translatedipaddress="164.90.149.104" AND sourceport=9022 OR translatedipaddress="164.90.149.104" AND sourceport=9021 OR translatedipaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationtranslatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationtranslatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationtranslatedport=4447)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND translatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND translatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND translatedport=4447)
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="165.22.195.35" AND destinationport=443 OR destinationaddress="165.227.63.241" AND destinationport=443 OR destinationaddress="164.90.149.104" AND destinationport=9022 OR destinationaddress="164.90.149.104" AND destinationport=9021 OR destinationaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="165.22.195.35" AND sourceport=443 OR sourceaddress="165.227.63.241" AND sourceport=443 OR sourceaddress="164.90.149.104" AND sourceport=9022 OR sourceaddress="164.90.149.104" AND sourceport=9021 OR sourceaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="165.22.195.35" AND sourceport=443 OR translatedipaddress="165.227.63.241" AND sourceport=443 OR translatedipaddress="164.90.149.104" AND sourceport=9022 OR translatedipaddress="164.90.149.104" AND sourceport=9021 OR translatedipaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationtranslatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationtranslatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationtranslatedport=4447)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND translatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND translatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND translatedport=4447)
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="165.22.195.35" AND destinationport=443 OR destinationaddress="165.227.63.241" AND destinationport=443 OR destinationaddress="164.90.149.104" AND destinationport=9022 OR destinationaddress="164.90.149.104" AND destinationport=9021 OR destinationaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="165.22.195.35" AND sourceport=443 OR sourceaddress="165.227.63.241" AND sourceport=443 OR sourceaddress="164.90.149.104" AND sourceport=9022 OR sourceaddress="164.90.149.104" AND sourceport=9021 OR sourceaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="165.22.195.35" AND sourceport=443 OR translatedipaddress="165.227.63.241" AND sourceport=443 OR translatedipaddress="164.90.149.104" AND sourceport=9022 OR translatedipaddress="164.90.149.104" AND sourceport=9021 OR translatedipaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationtranslatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationtranslatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationtranslatedport=4447)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND translatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND translatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND translatedport=4447)
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="165.22.195.35" AND destinationport=443 OR destinationaddress="165.227.63.241" AND destinationport=443 OR destinationaddress="164.90.149.104" AND destinationport=9022 OR destinationaddress="164.90.149.104" AND destinationport=9021 OR destinationaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="165.22.195.35" AND sourceport=443 OR sourceaddress="165.227.63.241" AND sourceport=443 OR sourceaddress="164.90.149.104" AND sourceport=9022 OR sourceaddress="164.90.149.104" AND sourceport=9021 OR sourceaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="165.22.195.35" AND sourceport=443 OR translatedipaddress="165.227.63.241" AND sourceport=443 OR translatedipaddress="164.90.149.104" AND sourceport=9022 OR translatedipaddress="164.90.149.104" AND sourceport=9021 OR translatedipaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationtranslatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationtranslatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationtranslatedport=4447)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND translatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND translatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND translatedport=4447)
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="165.22.195.35" AND destinationport=443 OR destinationaddress="165.227.63.241" AND destinationport=443 OR destinationaddress="164.90.149.104" AND destinationport=9022 OR destinationaddress="164.90.149.104" AND destinationport=9021 OR destinationaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="165.22.195.35" AND sourceport=443 OR sourceaddress="165.227.63.241" AND sourceport=443 OR sourceaddress="164.90.149.104" AND sourceport=9022 OR sourceaddress="164.90.149.104" AND sourceport=9021 OR sourceaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="165.22.195.35" AND sourceport=443 OR translatedipaddress="165.227.63.241" AND sourceport=443 OR translatedipaddress="164.90.149.104" AND sourceport=9022 OR translatedipaddress="164.90.149.104" AND sourceport=9021 OR translatedipaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationtranslatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationtranslatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationtranslatedport=4447)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND translatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND translatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND translatedport=4447)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="165.22.195.35" AND destinationport=443 OR destinationaddress="165.227.63.241" AND destinationport=443 OR destinationaddress="164.90.149.104" AND destinationport=9022 OR destinationaddress="164.90.149.104" AND destinationport=9021 OR destinationaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="165.22.195.35" AND sourceport=443 OR sourceaddress="165.227.63.241" AND sourceport=443 OR sourceaddress="164.90.149.104" AND sourceport=9022 OR sourceaddress="164.90.149.104" AND sourceport=9021 OR sourceaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="165.22.195.35" AND sourceport=443 OR translatedipaddress="165.227.63.241" AND sourceport=443 OR translatedipaddress="164.90.149.104" AND sourceport=9022 OR translatedipaddress="164.90.149.104" AND sourceport=9021 OR translatedipaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationtranslatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationtranslatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationtranslatedport=4447)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND translatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND translatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND translatedport=4447)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="165.22.195.35" AND destinationport=443 OR destinationaddress="165.227.63.241" AND destinationport=443 OR destinationaddress="164.90.149.104" AND destinationport=9022 OR destinationaddress="164.90.149.104" AND destinationport=9021 OR destinationaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="165.22.195.35" AND sourceport=443 OR sourceaddress="165.227.63.241" AND sourceport=443 OR sourceaddress="164.90.149.104" AND sourceport=9022 OR sourceaddress="164.90.149.104" AND sourceport=9021 OR sourceaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="165.22.195.35" AND sourceport=443 OR translatedipaddress="165.227.63.241" AND sourceport=443 OR translatedipaddress="164.90.149.104" AND sourceport=9022 OR translatedipaddress="164.90.149.104" AND sourceport=9021 OR translatedipaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationtranslatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationtranslatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationtranslatedport=4447)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND translatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND translatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND translatedport=4447)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="165.22.195.35" AND destinationport=443 OR destinationaddress="165.227.63.241" AND destinationport=443 OR destinationaddress="164.90.149.104" AND destinationport=9022 OR destinationaddress="164.90.149.104" AND destinationport=9021 OR destinationaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="165.22.195.35" AND sourceport=443 OR sourceaddress="165.227.63.241" AND sourceport=443 OR sourceaddress="164.90.149.104" AND sourceport=9022 OR sourceaddress="164.90.149.104" AND sourceport=9021 OR sourceaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="165.22.195.35" AND sourceport=443 OR translatedipaddress="165.227.63.241" AND sourceport=443 OR translatedipaddress="164.90.149.104" AND sourceport=9022 OR translatedipaddress="164.90.149.104" AND sourceport=9021 OR translatedipaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationtranslatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationtranslatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationtranslatedport=4447)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND translatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND translatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND translatedport=4447)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="165.22.195.35" AND destinationport=443 OR destinationaddress="165.227.63.241" AND destinationport=443 OR destinationaddress="164.90.149.104" AND destinationport=9022 OR destinationaddress="164.90.149.104" AND destinationport=9021 OR destinationaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="165.22.195.35" AND sourceport=443 OR sourceaddress="165.227.63.241" AND sourceport=443 OR sourceaddress="164.90.149.104" AND sourceport=9022 OR sourceaddress="164.90.149.104" AND sourceport=9021 OR sourceaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="165.22.195.35" AND sourceport=443 OR translatedipaddress="165.227.63.241" AND sourceport=443 OR translatedipaddress="164.90.149.104" AND sourceport=9022 OR translatedipaddress="164.90.149.104" AND sourceport=9021 OR translatedipaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationtranslatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationtranslatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationtranslatedport=4447)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND translatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND translatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND translatedport=4447)
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="165.22.195.35" AND destinationport=443 OR destinationaddress="165.227.63.241" AND destinationport=443 OR destinationaddress="164.90.149.104" AND destinationport=9022 OR destinationaddress="164.90.149.104" AND destinationport=9021 OR destinationaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="165.22.195.35" AND sourceport=443 OR sourceaddress="165.227.63.241" AND sourceport=443 OR sourceaddress="164.90.149.104" AND sourceport=9022 OR sourceaddress="164.90.149.104" AND sourceport=9021 OR sourceaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="165.22.195.35" AND sourceport=443 OR translatedipaddress="165.227.63.241" AND sourceport=443 OR translatedipaddress="164.90.149.104" AND sourceport=9022 OR translatedipaddress="164.90.149.104" AND sourceport=9021 OR translatedipaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationtranslatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationtranslatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationtranslatedport=4447)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND translatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND translatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND translatedport=4447)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="165.22.195.35" AND destinationport=443 OR destinationaddress="165.227.63.241" AND destinationport=443 OR destinationaddress="164.90.149.104" AND destinationport=9022 OR destinationaddress="164.90.149.104" AND destinationport=9021 OR destinationaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="165.22.195.35" AND sourceport=443 OR sourceaddress="165.227.63.241" AND sourceport=443 OR sourceaddress="164.90.149.104" AND sourceport=9022 OR sourceaddress="164.90.149.104" AND sourceport=9021 OR sourceaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="165.22.195.35" AND sourceport=443 OR translatedipaddress="165.227.63.241" AND sourceport=443 OR translatedipaddress="164.90.149.104" AND sourceport=9022 OR translatedipaddress="164.90.149.104" AND sourceport=9021 OR translatedipaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationtranslatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationtranslatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationtranslatedport=4447)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND translatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND translatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND translatedport=4447)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="165.22.195.35" AND destinationport=443 OR destinationaddress="165.227.63.241" AND destinationport=443 OR destinationaddress="164.90.149.104" AND destinationport=9022 OR destinationaddress="164.90.149.104" AND destinationport=9021 OR destinationaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="165.22.195.35" AND sourceport=443 OR sourceaddress="165.227.63.241" AND sourceport=443 OR sourceaddress="164.90.149.104" AND sourceport=9022 OR sourceaddress="164.90.149.104" AND sourceport=9021 OR sourceaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="165.22.195.35" AND sourceport=443 OR translatedipaddress="165.227.63.241" AND sourceport=443 OR translatedipaddress="164.90.149.104" AND sourceport=9022 OR translatedipaddress="164.90.149.104" AND sourceport=9021 OR translatedipaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationtranslatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationtranslatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationtranslatedport=4447)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND translatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND translatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND translatedport=4447)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="165.22.195.35" AND destinationport=443 OR destinationaddress="165.227.63.241" AND destinationport=443 OR destinationaddress="164.90.149.104" AND destinationport=9022 OR destinationaddress="164.90.149.104" AND destinationport=9021 OR destinationaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="165.22.195.35" AND sourceport=443 OR sourceaddress="165.227.63.241" AND sourceport=443 OR sourceaddress="164.90.149.104" AND sourceport=9022 OR sourceaddress="164.90.149.104" AND sourceport=9021 OR sourceaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="165.22.195.35" AND sourceport=443 OR translatedipaddress="165.227.63.241" AND sourceport=443 OR translatedipaddress="164.90.149.104" AND sourceport=9022 OR translatedipaddress="164.90.149.104" AND sourceport=9021 OR translatedipaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationtranslatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationtranslatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationtranslatedport=4447)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND translatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND translatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND translatedport=4447)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="165.22.195.35" AND destinationport=443 OR destinationaddress="165.227.63.241" AND destinationport=443 OR destinationaddress="164.90.149.104" AND destinationport=9022 OR destinationaddress="164.90.149.104" AND destinationport=9021 OR destinationaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="165.22.195.35" AND sourceport=443 OR sourceaddress="165.227.63.241" AND sourceport=443 OR sourceaddress="164.90.149.104" AND sourceport=9022 OR sourceaddress="164.90.149.104" AND sourceport=9021 OR sourceaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="165.22.195.35" AND sourceport=443 OR translatedipaddress="165.227.63.241" AND sourceport=443 OR translatedipaddress="164.90.149.104" AND sourceport=9022 OR translatedipaddress="164.90.149.104" AND sourceport=9021 OR translatedipaddress="192.241.144.69" AND sourceport=4447)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationport=4447)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND destinationtranslatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND destinationtranslatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND destinationtranslatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND destinationtranslatedport=4447)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="165.22.195.35" AND translatedport=443 OR destinationtranslatedaddress="165.227.63.241" AND translatedport=443 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9022 OR destinationtranslatedaddress="164.90.149.104" AND translatedport=9021 OR destinationtranslatedaddress="192.241.144.69" AND translatedport=4447)
