index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("7d1f2798bd70c6cf04f5ad4de1aa68d2","f2752c991000ad9d807fcbe188f03695","d96c44db10ede8dc5c8df5b04bc5a5ab","3d5020f7ecef39be3f647f272f56c996","4c6ee0059bcbbf43f2afa4ee035067e0","4fa829b94199ee2cb19f517aedbb6aa3","47495e97a50b871628b9c8bc02373bdf","79f71e7de2b4cf306494723da6f1448e","e960ea87a9176c2a3f7b4f7acc5970ec","2e320a71235b9b3ce0983a4b54785c86","7fb0c391fd1f03ea7c9fe832a910648e","9307a671d95b466ff7f6f49cd547160c","ecadebd64791f51fa17a99e38fd92818","9d7c6846f6cca8286b8b326da1d8bd91","f2396285c26ffad12505537dcde9be7e","80886e4eeba4e683f5da925cd35289b6","7610c370369217965b7ec150109850e4","10ebdacd4ec7b3d913932dafc2163751","0815f16751a482e4609941d08014d57c","57abfbaa592ac3da0fa43ba71a582793","7937cee46561d7a7d10ca226be961c0e","ee2167b1a197b52191052da01f4a85b5","38b228e51e7cfa48904fbcb4a106d5b4","66f989018eabd937c731ddba40605146","05204f26f8d5161ab487dc41b78624b0","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("7d1f2798bd70c6cf04f5ad4de1aa68d2","f2752c991000ad9d807fcbe188f03695","d96c44db10ede8dc5c8df5b04bc5a5ab","3d5020f7ecef39be3f647f272f56c996","4c6ee0059bcbbf43f2afa4ee035067e0","4fa829b94199ee2cb19f517aedbb6aa3","47495e97a50b871628b9c8bc02373bdf","79f71e7de2b4cf306494723da6f1448e","e960ea87a9176c2a3f7b4f7acc5970ec","2e320a71235b9b3ce0983a4b54785c86","7fb0c391fd1f03ea7c9fe832a910648e","9307a671d95b466ff7f6f49cd547160c","ecadebd64791f51fa17a99e38fd92818","9d7c6846f6cca8286b8b326da1d8bd91","f2396285c26ffad12505537dcde9be7e","80886e4eeba4e683f5da925cd35289b6","7610c370369217965b7ec150109850e4","10ebdacd4ec7b3d913932dafc2163751","0815f16751a482e4609941d08014d57c","57abfbaa592ac3da0fa43ba71a582793","7937cee46561d7a7d10ca226be961c0e","ee2167b1a197b52191052da01f4a85b5","38b228e51e7cfa48904fbcb4a106d5b4","66f989018eabd937c731ddba40605146","05204f26f8d5161ab487dc41b78624b0","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("7d1f2798bd70c6cf04f5ad4de1aa68d2","f2752c991000ad9d807fcbe188f03695","d96c44db10ede8dc5c8df5b04bc5a5ab","3d5020f7ecef39be3f647f272f56c996","4c6ee0059bcbbf43f2afa4ee035067e0","4fa829b94199ee2cb19f517aedbb6aa3","47495e97a50b871628b9c8bc02373bdf","79f71e7de2b4cf306494723da6f1448e","e960ea87a9176c2a3f7b4f7acc5970ec","2e320a71235b9b3ce0983a4b54785c86","7fb0c391fd1f03ea7c9fe832a910648e","9307a671d95b466ff7f6f49cd547160c","ecadebd64791f51fa17a99e38fd92818","9d7c6846f6cca8286b8b326da1d8bd91","f2396285c26ffad12505537dcde9be7e","80886e4eeba4e683f5da925cd35289b6","7610c370369217965b7ec150109850e4","10ebdacd4ec7b3d913932dafc2163751","0815f16751a482e4609941d08014d57c","57abfbaa592ac3da0fa43ba71a582793","7937cee46561d7a7d10ca226be961c0e","ee2167b1a197b52191052da01f4a85b5","38b228e51e7cfa48904fbcb4a106d5b4","66f989018eabd937c731ddba40605146","05204f26f8d5161ab487dc41b78624b0","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("7d1f2798bd70c6cf04f5ad4de1aa68d2","f2752c991000ad9d807fcbe188f03695","d96c44db10ede8dc5c8df5b04bc5a5ab","3d5020f7ecef39be3f647f272f56c996","4c6ee0059bcbbf43f2afa4ee035067e0","4fa829b94199ee2cb19f517aedbb6aa3","47495e97a50b871628b9c8bc02373bdf","79f71e7de2b4cf306494723da6f1448e","e960ea87a9176c2a3f7b4f7acc5970ec","2e320a71235b9b3ce0983a4b54785c86","7fb0c391fd1f03ea7c9fe832a910648e","9307a671d95b466ff7f6f49cd547160c","ecadebd64791f51fa17a99e38fd92818","9d7c6846f6cca8286b8b326da1d8bd91","f2396285c26ffad12505537dcde9be7e","80886e4eeba4e683f5da925cd35289b6","7610c370369217965b7ec150109850e4","10ebdacd4ec7b3d913932dafc2163751","0815f16751a482e4609941d08014d57c","57abfbaa592ac3da0fa43ba71a582793","7937cee46561d7a7d10ca226be961c0e","ee2167b1a197b52191052da01f4a85b5","38b228e51e7cfa48904fbcb4a106d5b4","66f989018eabd937c731ddba40605146","05204f26f8d5161ab487dc41b78624b0","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("7d1f2798bd70c6cf04f5ad4de1aa68d2","f2752c991000ad9d807fcbe188f03695","d96c44db10ede8dc5c8df5b04bc5a5ab","3d5020f7ecef39be3f647f272f56c996","4c6ee0059bcbbf43f2afa4ee035067e0","4fa829b94199ee2cb19f517aedbb6aa3","47495e97a50b871628b9c8bc02373bdf","79f71e7de2b4cf306494723da6f1448e","e960ea87a9176c2a3f7b4f7acc5970ec","2e320a71235b9b3ce0983a4b54785c86","7fb0c391fd1f03ea7c9fe832a910648e","9307a671d95b466ff7f6f49cd547160c","ecadebd64791f51fa17a99e38fd92818","9d7c6846f6cca8286b8b326da1d8bd91","f2396285c26ffad12505537dcde9be7e","80886e4eeba4e683f5da925cd35289b6","7610c370369217965b7ec150109850e4","10ebdacd4ec7b3d913932dafc2163751","0815f16751a482e4609941d08014d57c","57abfbaa592ac3da0fa43ba71a582793","7937cee46561d7a7d10ca226be961c0e","ee2167b1a197b52191052da01f4a85b5","38b228e51e7cfa48904fbcb4a106d5b4","66f989018eabd937c731ddba40605146","05204f26f8d5161ab487dc41b78624b0","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("7d1f2798bd70c6cf04f5ad4de1aa68d2","f2752c991000ad9d807fcbe188f03695","d96c44db10ede8dc5c8df5b04bc5a5ab","3d5020f7ecef39be3f647f272f56c996","4c6ee0059bcbbf43f2afa4ee035067e0","4fa829b94199ee2cb19f517aedbb6aa3","47495e97a50b871628b9c8bc02373bdf","79f71e7de2b4cf306494723da6f1448e","e960ea87a9176c2a3f7b4f7acc5970ec","2e320a71235b9b3ce0983a4b54785c86","7fb0c391fd1f03ea7c9fe832a910648e","9307a671d95b466ff7f6f49cd547160c","ecadebd64791f51fa17a99e38fd92818","9d7c6846f6cca8286b8b326da1d8bd91","f2396285c26ffad12505537dcde9be7e","80886e4eeba4e683f5da925cd35289b6","7610c370369217965b7ec150109850e4","10ebdacd4ec7b3d913932dafc2163751","0815f16751a482e4609941d08014d57c","57abfbaa592ac3da0fa43ba71a582793","7937cee46561d7a7d10ca226be961c0e","ee2167b1a197b52191052da01f4a85b5","38b228e51e7cfa48904fbcb4a106d5b4","66f989018eabd937c731ddba40605146","05204f26f8d5161ab487dc41b78624b0","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("7d1f2798bd70c6cf04f5ad4de1aa68d2","f2752c991000ad9d807fcbe188f03695","d96c44db10ede8dc5c8df5b04bc5a5ab","3d5020f7ecef39be3f647f272f56c996","4c6ee0059bcbbf43f2afa4ee035067e0","4fa829b94199ee2cb19f517aedbb6aa3","47495e97a50b871628b9c8bc02373bdf","79f71e7de2b4cf306494723da6f1448e","e960ea87a9176c2a3f7b4f7acc5970ec","2e320a71235b9b3ce0983a4b54785c86","7fb0c391fd1f03ea7c9fe832a910648e","9307a671d95b466ff7f6f49cd547160c","ecadebd64791f51fa17a99e38fd92818","9d7c6846f6cca8286b8b326da1d8bd91","f2396285c26ffad12505537dcde9be7e","80886e4eeba4e683f5da925cd35289b6","7610c370369217965b7ec150109850e4","10ebdacd4ec7b3d913932dafc2163751","0815f16751a482e4609941d08014d57c","57abfbaa592ac3da0fa43ba71a582793","7937cee46561d7a7d10ca226be961c0e","ee2167b1a197b52191052da01f4a85b5","38b228e51e7cfa48904fbcb4a106d5b4","66f989018eabd937c731ddba40605146","05204f26f8d5161ab487dc41b78624b0","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("7d1f2798bd70c6cf04f5ad4de1aa68d2","f2752c991000ad9d807fcbe188f03695","d96c44db10ede8dc5c8df5b04bc5a5ab","3d5020f7ecef39be3f647f272f56c996","4c6ee0059bcbbf43f2afa4ee035067e0","4fa829b94199ee2cb19f517aedbb6aa3","47495e97a50b871628b9c8bc02373bdf","79f71e7de2b4cf306494723da6f1448e","e960ea87a9176c2a3f7b4f7acc5970ec","2e320a71235b9b3ce0983a4b54785c86","7fb0c391fd1f03ea7c9fe832a910648e","9307a671d95b466ff7f6f49cd547160c","ecadebd64791f51fa17a99e38fd92818","9d7c6846f6cca8286b8b326da1d8bd91","f2396285c26ffad12505537dcde9be7e","80886e4eeba4e683f5da925cd35289b6","7610c370369217965b7ec150109850e4","10ebdacd4ec7b3d913932dafc2163751","0815f16751a482e4609941d08014d57c","57abfbaa592ac3da0fa43ba71a582793","7937cee46561d7a7d10ca226be961c0e","ee2167b1a197b52191052da01f4a85b5","38b228e51e7cfa48904fbcb4a106d5b4","66f989018eabd937c731ddba40605146","05204f26f8d5161ab487dc41b78624b0","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("7d1f2798bd70c6cf04f5ad4de1aa68d2","f2752c991000ad9d807fcbe188f03695","d96c44db10ede8dc5c8df5b04bc5a5ab","3d5020f7ecef39be3f647f272f56c996","4c6ee0059bcbbf43f2afa4ee035067e0","4fa829b94199ee2cb19f517aedbb6aa3","47495e97a50b871628b9c8bc02373bdf","79f71e7de2b4cf306494723da6f1448e","e960ea87a9176c2a3f7b4f7acc5970ec","2e320a71235b9b3ce0983a4b54785c86","7fb0c391fd1f03ea7c9fe832a910648e","9307a671d95b466ff7f6f49cd547160c","ecadebd64791f51fa17a99e38fd92818","9d7c6846f6cca8286b8b326da1d8bd91","f2396285c26ffad12505537dcde9be7e","80886e4eeba4e683f5da925cd35289b6","7610c370369217965b7ec150109850e4","10ebdacd4ec7b3d913932dafc2163751","0815f16751a482e4609941d08014d57c","57abfbaa592ac3da0fa43ba71a582793","7937cee46561d7a7d10ca226be961c0e","ee2167b1a197b52191052da01f4a85b5","38b228e51e7cfa48904fbcb4a106d5b4","66f989018eabd937c731ddba40605146","05204f26f8d5161ab487dc41b78624b0","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("7d1f2798bd70c6cf04f5ad4de1aa68d2","f2752c991000ad9d807fcbe188f03695","d96c44db10ede8dc5c8df5b04bc5a5ab","3d5020f7ecef39be3f647f272f56c996","4c6ee0059bcbbf43f2afa4ee035067e0","4fa829b94199ee2cb19f517aedbb6aa3","47495e97a50b871628b9c8bc02373bdf","79f71e7de2b4cf306494723da6f1448e","e960ea87a9176c2a3f7b4f7acc5970ec","2e320a71235b9b3ce0983a4b54785c86","7fb0c391fd1f03ea7c9fe832a910648e","9307a671d95b466ff7f6f49cd547160c","ecadebd64791f51fa17a99e38fd92818","9d7c6846f6cca8286b8b326da1d8bd91","f2396285c26ffad12505537dcde9be7e","80886e4eeba4e683f5da925cd35289b6","7610c370369217965b7ec150109850e4","10ebdacd4ec7b3d913932dafc2163751","0815f16751a482e4609941d08014d57c","57abfbaa592ac3da0fa43ba71a582793","7937cee46561d7a7d10ca226be961c0e","ee2167b1a197b52191052da01f4a85b5","38b228e51e7cfa48904fbcb4a106d5b4","66f989018eabd937c731ddba40605146","05204f26f8d5161ab487dc41b78624b0","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("7d1f2798bd70c6cf04f5ad4de1aa68d2","f2752c991000ad9d807fcbe188f03695","d96c44db10ede8dc5c8df5b04bc5a5ab","3d5020f7ecef39be3f647f272f56c996","4c6ee0059bcbbf43f2afa4ee035067e0","4fa829b94199ee2cb19f517aedbb6aa3","47495e97a50b871628b9c8bc02373bdf","79f71e7de2b4cf306494723da6f1448e","e960ea87a9176c2a3f7b4f7acc5970ec","2e320a71235b9b3ce0983a4b54785c86","7fb0c391fd1f03ea7c9fe832a910648e","9307a671d95b466ff7f6f49cd547160c","ecadebd64791f51fa17a99e38fd92818","9d7c6846f6cca8286b8b326da1d8bd91","f2396285c26ffad12505537dcde9be7e","80886e4eeba4e683f5da925cd35289b6","7610c370369217965b7ec150109850e4","10ebdacd4ec7b3d913932dafc2163751","0815f16751a482e4609941d08014d57c","57abfbaa592ac3da0fa43ba71a582793","7937cee46561d7a7d10ca226be961c0e","ee2167b1a197b52191052da01f4a85b5","38b228e51e7cfa48904fbcb4a106d5b4","66f989018eabd937c731ddba40605146","05204f26f8d5161ab487dc41b78624b0","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("7d1f2798bd70c6cf04f5ad4de1aa68d2","f2752c991000ad9d807fcbe188f03695","d96c44db10ede8dc5c8df5b04bc5a5ab","3d5020f7ecef39be3f647f272f56c996","4c6ee0059bcbbf43f2afa4ee035067e0","4fa829b94199ee2cb19f517aedbb6aa3","47495e97a50b871628b9c8bc02373bdf","79f71e7de2b4cf306494723da6f1448e","e960ea87a9176c2a3f7b4f7acc5970ec","2e320a71235b9b3ce0983a4b54785c86","7fb0c391fd1f03ea7c9fe832a910648e","9307a671d95b466ff7f6f49cd547160c","ecadebd64791f51fa17a99e38fd92818","9d7c6846f6cca8286b8b326da1d8bd91","f2396285c26ffad12505537dcde9be7e","80886e4eeba4e683f5da925cd35289b6","7610c370369217965b7ec150109850e4","10ebdacd4ec7b3d913932dafc2163751","0815f16751a482e4609941d08014d57c","57abfbaa592ac3da0fa43ba71a582793","7937cee46561d7a7d10ca226be961c0e","ee2167b1a197b52191052da01f4a85b5","38b228e51e7cfa48904fbcb4a106d5b4","66f989018eabd937c731ddba40605146","05204f26f8d5161ab487dc41b78624b0","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("7d1f2798bd70c6cf04f5ad4de1aa68d2","f2752c991000ad9d807fcbe188f03695","d96c44db10ede8dc5c8df5b04bc5a5ab","3d5020f7ecef39be3f647f272f56c996","4c6ee0059bcbbf43f2afa4ee035067e0","4fa829b94199ee2cb19f517aedbb6aa3","47495e97a50b871628b9c8bc02373bdf","79f71e7de2b4cf306494723da6f1448e","e960ea87a9176c2a3f7b4f7acc5970ec","2e320a71235b9b3ce0983a4b54785c86","7fb0c391fd1f03ea7c9fe832a910648e","9307a671d95b466ff7f6f49cd547160c","ecadebd64791f51fa17a99e38fd92818","9d7c6846f6cca8286b8b326da1d8bd91","f2396285c26ffad12505537dcde9be7e","80886e4eeba4e683f5da925cd35289b6","7610c370369217965b7ec150109850e4","10ebdacd4ec7b3d913932dafc2163751","0815f16751a482e4609941d08014d57c","57abfbaa592ac3da0fa43ba71a582793","7937cee46561d7a7d10ca226be961c0e","ee2167b1a197b52191052da01f4a85b5","38b228e51e7cfa48904fbcb4a106d5b4","66f989018eabd937c731ddba40605146","05204f26f8d5161ab487dc41b78624b0","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("7d1f2798bd70c6cf04f5ad4de1aa68d2","f2752c991000ad9d807fcbe188f03695","d96c44db10ede8dc5c8df5b04bc5a5ab","3d5020f7ecef39be3f647f272f56c996","4c6ee0059bcbbf43f2afa4ee035067e0","4fa829b94199ee2cb19f517aedbb6aa3","47495e97a50b871628b9c8bc02373bdf","79f71e7de2b4cf306494723da6f1448e","e960ea87a9176c2a3f7b4f7acc5970ec","2e320a71235b9b3ce0983a4b54785c86","7fb0c391fd1f03ea7c9fe832a910648e","9307a671d95b466ff7f6f49cd547160c","ecadebd64791f51fa17a99e38fd92818","9d7c6846f6cca8286b8b326da1d8bd91","f2396285c26ffad12505537dcde9be7e","80886e4eeba4e683f5da925cd35289b6","7610c370369217965b7ec150109850e4","10ebdacd4ec7b3d913932dafc2163751","0815f16751a482e4609941d08014d57c","57abfbaa592ac3da0fa43ba71a582793","7937cee46561d7a7d10ca226be961c0e","ee2167b1a197b52191052da01f4a85b5","38b228e51e7cfa48904fbcb4a106d5b4","66f989018eabd937c731ddba40605146","05204f26f8d5161ab487dc41b78624b0","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("7d1f2798bd70c6cf04f5ad4de1aa68d2","f2752c991000ad9d807fcbe188f03695","d96c44db10ede8dc5c8df5b04bc5a5ab","3d5020f7ecef39be3f647f272f56c996","4c6ee0059bcbbf43f2afa4ee035067e0","4fa829b94199ee2cb19f517aedbb6aa3","47495e97a50b871628b9c8bc02373bdf","79f71e7de2b4cf306494723da6f1448e","e960ea87a9176c2a3f7b4f7acc5970ec","2e320a71235b9b3ce0983a4b54785c86","7fb0c391fd1f03ea7c9fe832a910648e","9307a671d95b466ff7f6f49cd547160c","ecadebd64791f51fa17a99e38fd92818","9d7c6846f6cca8286b8b326da1d8bd91","f2396285c26ffad12505537dcde9be7e","80886e4eeba4e683f5da925cd35289b6","7610c370369217965b7ec150109850e4","10ebdacd4ec7b3d913932dafc2163751","0815f16751a482e4609941d08014d57c","57abfbaa592ac3da0fa43ba71a582793","7937cee46561d7a7d10ca226be961c0e","ee2167b1a197b52191052da01f4a85b5","38b228e51e7cfa48904fbcb4a106d5b4","66f989018eabd937c731ddba40605146","05204f26f8d5161ab487dc41b78624b0","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("7d1f2798bd70c6cf04f5ad4de1aa68d2","f2752c991000ad9d807fcbe188f03695","d96c44db10ede8dc5c8df5b04bc5a5ab","3d5020f7ecef39be3f647f272f56c996","4c6ee0059bcbbf43f2afa4ee035067e0","4fa829b94199ee2cb19f517aedbb6aa3","47495e97a50b871628b9c8bc02373bdf","79f71e7de2b4cf306494723da6f1448e","e960ea87a9176c2a3f7b4f7acc5970ec","2e320a71235b9b3ce0983a4b54785c86","7fb0c391fd1f03ea7c9fe832a910648e","9307a671d95b466ff7f6f49cd547160c","ecadebd64791f51fa17a99e38fd92818","9d7c6846f6cca8286b8b326da1d8bd91","f2396285c26ffad12505537dcde9be7e","80886e4eeba4e683f5da925cd35289b6","7610c370369217965b7ec150109850e4","10ebdacd4ec7b3d913932dafc2163751","0815f16751a482e4609941d08014d57c","57abfbaa592ac3da0fa43ba71a582793","7937cee46561d7a7d10ca226be961c0e","ee2167b1a197b52191052da01f4a85b5","38b228e51e7cfa48904fbcb4a106d5b4","66f989018eabd937c731ddba40605146","05204f26f8d5161ab487dc41b78624b0","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("7d1f2798bd70c6cf04f5ad4de1aa68d2","f2752c991000ad9d807fcbe188f03695","d96c44db10ede8dc5c8df5b04bc5a5ab","3d5020f7ecef39be3f647f272f56c996","4c6ee0059bcbbf43f2afa4ee035067e0","4fa829b94199ee2cb19f517aedbb6aa3","47495e97a50b871628b9c8bc02373bdf","79f71e7de2b4cf306494723da6f1448e","e960ea87a9176c2a3f7b4f7acc5970ec","2e320a71235b9b3ce0983a4b54785c86","7fb0c391fd1f03ea7c9fe832a910648e","9307a671d95b466ff7f6f49cd547160c","ecadebd64791f51fa17a99e38fd92818","9d7c6846f6cca8286b8b326da1d8bd91","f2396285c26ffad12505537dcde9be7e","80886e4eeba4e683f5da925cd35289b6","7610c370369217965b7ec150109850e4","10ebdacd4ec7b3d913932dafc2163751","0815f16751a482e4609941d08014d57c","57abfbaa592ac3da0fa43ba71a582793","7937cee46561d7a7d10ca226be961c0e","ee2167b1a197b52191052da01f4a85b5","38b228e51e7cfa48904fbcb4a106d5b4","66f989018eabd937c731ddba40605146","05204f26f8d5161ab487dc41b78624b0","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("7d1f2798bd70c6cf04f5ad4de1aa68d2","f2752c991000ad9d807fcbe188f03695","d96c44db10ede8dc5c8df5b04bc5a5ab","3d5020f7ecef39be3f647f272f56c996","4c6ee0059bcbbf43f2afa4ee035067e0","4fa829b94199ee2cb19f517aedbb6aa3","47495e97a50b871628b9c8bc02373bdf","79f71e7de2b4cf306494723da6f1448e","e960ea87a9176c2a3f7b4f7acc5970ec","2e320a71235b9b3ce0983a4b54785c86","7fb0c391fd1f03ea7c9fe832a910648e","9307a671d95b466ff7f6f49cd547160c","ecadebd64791f51fa17a99e38fd92818","9d7c6846f6cca8286b8b326da1d8bd91","f2396285c26ffad12505537dcde9be7e","80886e4eeba4e683f5da925cd35289b6","7610c370369217965b7ec150109850e4","10ebdacd4ec7b3d913932dafc2163751","0815f16751a482e4609941d08014d57c","57abfbaa592ac3da0fa43ba71a582793","7937cee46561d7a7d10ca226be961c0e","ee2167b1a197b52191052da01f4a85b5","38b228e51e7cfa48904fbcb4a106d5b4","66f989018eabd937c731ddba40605146","05204f26f8d5161ab487dc41b78624b0","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("7d1f2798bd70c6cf04f5ad4de1aa68d2","f2752c991000ad9d807fcbe188f03695","d96c44db10ede8dc5c8df5b04bc5a5ab","3d5020f7ecef39be3f647f272f56c996","4c6ee0059bcbbf43f2afa4ee035067e0","4fa829b94199ee2cb19f517aedbb6aa3","47495e97a50b871628b9c8bc02373bdf","79f71e7de2b4cf306494723da6f1448e","e960ea87a9176c2a3f7b4f7acc5970ec","2e320a71235b9b3ce0983a4b54785c86","7fb0c391fd1f03ea7c9fe832a910648e","9307a671d95b466ff7f6f49cd547160c","ecadebd64791f51fa17a99e38fd92818","9d7c6846f6cca8286b8b326da1d8bd91","f2396285c26ffad12505537dcde9be7e","80886e4eeba4e683f5da925cd35289b6","7610c370369217965b7ec150109850e4","10ebdacd4ec7b3d913932dafc2163751","0815f16751a482e4609941d08014d57c","57abfbaa592ac3da0fa43ba71a582793","7937cee46561d7a7d10ca226be961c0e","ee2167b1a197b52191052da01f4a85b5","38b228e51e7cfa48904fbcb4a106d5b4","66f989018eabd937c731ddba40605146","05204f26f8d5161ab487dc41b78624b0","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("7d1f2798bd70c6cf04f5ad4de1aa68d2","f2752c991000ad9d807fcbe188f03695","d96c44db10ede8dc5c8df5b04bc5a5ab","3d5020f7ecef39be3f647f272f56c996","4c6ee0059bcbbf43f2afa4ee035067e0","4fa829b94199ee2cb19f517aedbb6aa3","47495e97a50b871628b9c8bc02373bdf","79f71e7de2b4cf306494723da6f1448e","e960ea87a9176c2a3f7b4f7acc5970ec","2e320a71235b9b3ce0983a4b54785c86","7fb0c391fd1f03ea7c9fe832a910648e","9307a671d95b466ff7f6f49cd547160c","ecadebd64791f51fa17a99e38fd92818","9d7c6846f6cca8286b8b326da1d8bd91","f2396285c26ffad12505537dcde9be7e","80886e4eeba4e683f5da925cd35289b6","7610c370369217965b7ec150109850e4","10ebdacd4ec7b3d913932dafc2163751","0815f16751a482e4609941d08014d57c","57abfbaa592ac3da0fa43ba71a582793","7937cee46561d7a7d10ca226be961c0e","ee2167b1a197b52191052da01f4a85b5","38b228e51e7cfa48904fbcb4a106d5b4","66f989018eabd937c731ddba40605146","05204f26f8d5161ab487dc41b78624b0","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("7d1f2798bd70c6cf04f5ad4de1aa68d2","f2752c991000ad9d807fcbe188f03695","d96c44db10ede8dc5c8df5b04bc5a5ab","3d5020f7ecef39be3f647f272f56c996","4c6ee0059bcbbf43f2afa4ee035067e0","4fa829b94199ee2cb19f517aedbb6aa3","47495e97a50b871628b9c8bc02373bdf","79f71e7de2b4cf306494723da6f1448e","e960ea87a9176c2a3f7b4f7acc5970ec","2e320a71235b9b3ce0983a4b54785c86","7fb0c391fd1f03ea7c9fe832a910648e","9307a671d95b466ff7f6f49cd547160c","ecadebd64791f51fa17a99e38fd92818","9d7c6846f6cca8286b8b326da1d8bd91","f2396285c26ffad12505537dcde9be7e","80886e4eeba4e683f5da925cd35289b6","7610c370369217965b7ec150109850e4","10ebdacd4ec7b3d913932dafc2163751","0815f16751a482e4609941d08014d57c","57abfbaa592ac3da0fa43ba71a582793","7937cee46561d7a7d10ca226be961c0e","ee2167b1a197b52191052da01f4a85b5","38b228e51e7cfa48904fbcb4a106d5b4","66f989018eabd937c731ddba40605146","05204f26f8d5161ab487dc41b78624b0","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("7d1f2798bd70c6cf04f5ad4de1aa68d2","f2752c991000ad9d807fcbe188f03695","d96c44db10ede8dc5c8df5b04bc5a5ab","3d5020f7ecef39be3f647f272f56c996","4c6ee0059bcbbf43f2afa4ee035067e0","4fa829b94199ee2cb19f517aedbb6aa3","47495e97a50b871628b9c8bc02373bdf","79f71e7de2b4cf306494723da6f1448e","e960ea87a9176c2a3f7b4f7acc5970ec","2e320a71235b9b3ce0983a4b54785c86","7fb0c391fd1f03ea7c9fe832a910648e","9307a671d95b466ff7f6f49cd547160c","ecadebd64791f51fa17a99e38fd92818","9d7c6846f6cca8286b8b326da1d8bd91","f2396285c26ffad12505537dcde9be7e","80886e4eeba4e683f5da925cd35289b6","7610c370369217965b7ec150109850e4","10ebdacd4ec7b3d913932dafc2163751","0815f16751a482e4609941d08014d57c","57abfbaa592ac3da0fa43ba71a582793","7937cee46561d7a7d10ca226be961c0e","ee2167b1a197b52191052da01f4a85b5","38b228e51e7cfa48904fbcb4a106d5b4","66f989018eabd937c731ddba40605146","05204f26f8d5161ab487dc41b78624b0","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("7d1f2798bd70c6cf04f5ad4de1aa68d2","f2752c991000ad9d807fcbe188f03695","d96c44db10ede8dc5c8df5b04bc5a5ab","3d5020f7ecef39be3f647f272f56c996","4c6ee0059bcbbf43f2afa4ee035067e0","4fa829b94199ee2cb19f517aedbb6aa3","47495e97a50b871628b9c8bc02373bdf","79f71e7de2b4cf306494723da6f1448e","e960ea87a9176c2a3f7b4f7acc5970ec","2e320a71235b9b3ce0983a4b54785c86","7fb0c391fd1f03ea7c9fe832a910648e","9307a671d95b466ff7f6f49cd547160c","ecadebd64791f51fa17a99e38fd92818","9d7c6846f6cca8286b8b326da1d8bd91","f2396285c26ffad12505537dcde9be7e","80886e4eeba4e683f5da925cd35289b6","7610c370369217965b7ec150109850e4","10ebdacd4ec7b3d913932dafc2163751","0815f16751a482e4609941d08014d57c","57abfbaa592ac3da0fa43ba71a582793","7937cee46561d7a7d10ca226be961c0e","ee2167b1a197b52191052da01f4a85b5","38b228e51e7cfa48904fbcb4a106d5b4","66f989018eabd937c731ddba40605146","05204f26f8d5161ab487dc41b78624b0","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("7d1f2798bd70c6cf04f5ad4de1aa68d2","f2752c991000ad9d807fcbe188f03695","d96c44db10ede8dc5c8df5b04bc5a5ab","3d5020f7ecef39be3f647f272f56c996","4c6ee0059bcbbf43f2afa4ee035067e0","4fa829b94199ee2cb19f517aedbb6aa3","47495e97a50b871628b9c8bc02373bdf","79f71e7de2b4cf306494723da6f1448e","e960ea87a9176c2a3f7b4f7acc5970ec","2e320a71235b9b3ce0983a4b54785c86","7fb0c391fd1f03ea7c9fe832a910648e","9307a671d95b466ff7f6f49cd547160c","ecadebd64791f51fa17a99e38fd92818","9d7c6846f6cca8286b8b326da1d8bd91","f2396285c26ffad12505537dcde9be7e","80886e4eeba4e683f5da925cd35289b6","7610c370369217965b7ec150109850e4","10ebdacd4ec7b3d913932dafc2163751","0815f16751a482e4609941d08014d57c","57abfbaa592ac3da0fa43ba71a582793","7937cee46561d7a7d10ca226be961c0e","ee2167b1a197b52191052da01f4a85b5","38b228e51e7cfa48904fbcb4a106d5b4","66f989018eabd937c731ddba40605146","05204f26f8d5161ab487dc41b78624b0","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("7d1f2798bd70c6cf04f5ad4de1aa68d2","f2752c991000ad9d807fcbe188f03695","d96c44db10ede8dc5c8df5b04bc5a5ab","3d5020f7ecef39be3f647f272f56c996","4c6ee0059bcbbf43f2afa4ee035067e0","4fa829b94199ee2cb19f517aedbb6aa3","47495e97a50b871628b9c8bc02373bdf","79f71e7de2b4cf306494723da6f1448e","e960ea87a9176c2a3f7b4f7acc5970ec","2e320a71235b9b3ce0983a4b54785c86","7fb0c391fd1f03ea7c9fe832a910648e","9307a671d95b466ff7f6f49cd547160c","ecadebd64791f51fa17a99e38fd92818","9d7c6846f6cca8286b8b326da1d8bd91","f2396285c26ffad12505537dcde9be7e","80886e4eeba4e683f5da925cd35289b6","7610c370369217965b7ec150109850e4","10ebdacd4ec7b3d913932dafc2163751","0815f16751a482e4609941d08014d57c","57abfbaa592ac3da0fa43ba71a582793","7937cee46561d7a7d10ca226be961c0e","ee2167b1a197b52191052da01f4a85b5","38b228e51e7cfa48904fbcb4a106d5b4","66f989018eabd937c731ddba40605146","05204f26f8d5161ab487dc41b78624b0","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("7d1f2798bd70c6cf04f5ad4de1aa68d2","f2752c991000ad9d807fcbe188f03695","d96c44db10ede8dc5c8df5b04bc5a5ab","3d5020f7ecef39be3f647f272f56c996","4c6ee0059bcbbf43f2afa4ee035067e0","4fa829b94199ee2cb19f517aedbb6aa3","47495e97a50b871628b9c8bc02373bdf","79f71e7de2b4cf306494723da6f1448e","e960ea87a9176c2a3f7b4f7acc5970ec","2e320a71235b9b3ce0983a4b54785c86","7fb0c391fd1f03ea7c9fe832a910648e","9307a671d95b466ff7f6f49cd547160c","ecadebd64791f51fa17a99e38fd92818","9d7c6846f6cca8286b8b326da1d8bd91","f2396285c26ffad12505537dcde9be7e","80886e4eeba4e683f5da925cd35289b6","7610c370369217965b7ec150109850e4","10ebdacd4ec7b3d913932dafc2163751","0815f16751a482e4609941d08014d57c","57abfbaa592ac3da0fa43ba71a582793","7937cee46561d7a7d10ca226be961c0e","ee2167b1a197b52191052da01f4a85b5","38b228e51e7cfa48904fbcb4a106d5b4","66f989018eabd937c731ddba40605146","05204f26f8d5161ab487dc41b78624b0","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("7d1f2798bd70c6cf04f5ad4de1aa68d2","f2752c991000ad9d807fcbe188f03695","d96c44db10ede8dc5c8df5b04bc5a5ab","3d5020f7ecef39be3f647f272f56c996","4c6ee0059bcbbf43f2afa4ee035067e0","4fa829b94199ee2cb19f517aedbb6aa3","47495e97a50b871628b9c8bc02373bdf","79f71e7de2b4cf306494723da6f1448e","e960ea87a9176c2a3f7b4f7acc5970ec","2e320a71235b9b3ce0983a4b54785c86","7fb0c391fd1f03ea7c9fe832a910648e","9307a671d95b466ff7f6f49cd547160c","ecadebd64791f51fa17a99e38fd92818","9d7c6846f6cca8286b8b326da1d8bd91","f2396285c26ffad12505537dcde9be7e","80886e4eeba4e683f5da925cd35289b6","7610c370369217965b7ec150109850e4","10ebdacd4ec7b3d913932dafc2163751","0815f16751a482e4609941d08014d57c","57abfbaa592ac3da0fa43ba71a582793","7937cee46561d7a7d10ca226be961c0e","ee2167b1a197b52191052da01f4a85b5","38b228e51e7cfa48904fbcb4a106d5b4","66f989018eabd937c731ddba40605146","05204f26f8d5161ab487dc41b78624b0","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("7d1f2798bd70c6cf04f5ad4de1aa68d2","f2752c991000ad9d807fcbe188f03695","d96c44db10ede8dc5c8df5b04bc5a5ab","3d5020f7ecef39be3f647f272f56c996","4c6ee0059bcbbf43f2afa4ee035067e0","4fa829b94199ee2cb19f517aedbb6aa3","47495e97a50b871628b9c8bc02373bdf","79f71e7de2b4cf306494723da6f1448e","e960ea87a9176c2a3f7b4f7acc5970ec","2e320a71235b9b3ce0983a4b54785c86","7fb0c391fd1f03ea7c9fe832a910648e","9307a671d95b466ff7f6f49cd547160c","ecadebd64791f51fa17a99e38fd92818","9d7c6846f6cca8286b8b326da1d8bd91","f2396285c26ffad12505537dcde9be7e","80886e4eeba4e683f5da925cd35289b6","7610c370369217965b7ec150109850e4","10ebdacd4ec7b3d913932dafc2163751","0815f16751a482e4609941d08014d57c","57abfbaa592ac3da0fa43ba71a582793","7937cee46561d7a7d10ca226be961c0e","ee2167b1a197b52191052da01f4a85b5","38b228e51e7cfa48904fbcb4a106d5b4","66f989018eabd937c731ddba40605146","05204f26f8d5161ab487dc41b78624b0","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("7d1f2798bd70c6cf04f5ad4de1aa68d2","f2752c991000ad9d807fcbe188f03695","d96c44db10ede8dc5c8df5b04bc5a5ab","3d5020f7ecef39be3f647f272f56c996","4c6ee0059bcbbf43f2afa4ee035067e0","4fa829b94199ee2cb19f517aedbb6aa3","47495e97a50b871628b9c8bc02373bdf","79f71e7de2b4cf306494723da6f1448e","e960ea87a9176c2a3f7b4f7acc5970ec","2e320a71235b9b3ce0983a4b54785c86","7fb0c391fd1f03ea7c9fe832a910648e","9307a671d95b466ff7f6f49cd547160c","ecadebd64791f51fa17a99e38fd92818","9d7c6846f6cca8286b8b326da1d8bd91","f2396285c26ffad12505537dcde9be7e","80886e4eeba4e683f5da925cd35289b6","7610c370369217965b7ec150109850e4","10ebdacd4ec7b3d913932dafc2163751","0815f16751a482e4609941d08014d57c","57abfbaa592ac3da0fa43ba71a582793","7937cee46561d7a7d10ca226be961c0e","ee2167b1a197b52191052da01f4a85b5","38b228e51e7cfa48904fbcb4a106d5b4","66f989018eabd937c731ddba40605146","05204f26f8d5161ab487dc41b78624b0","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("7d1f2798bd70c6cf04f5ad4de1aa68d2","f2752c991000ad9d807fcbe188f03695","d96c44db10ede8dc5c8df5b04bc5a5ab","3d5020f7ecef39be3f647f272f56c996","4c6ee0059bcbbf43f2afa4ee035067e0","4fa829b94199ee2cb19f517aedbb6aa3","47495e97a50b871628b9c8bc02373bdf","79f71e7de2b4cf306494723da6f1448e","e960ea87a9176c2a3f7b4f7acc5970ec","2e320a71235b9b3ce0983a4b54785c86","7fb0c391fd1f03ea7c9fe832a910648e","9307a671d95b466ff7f6f49cd547160c","ecadebd64791f51fa17a99e38fd92818","9d7c6846f6cca8286b8b326da1d8bd91","f2396285c26ffad12505537dcde9be7e","80886e4eeba4e683f5da925cd35289b6","7610c370369217965b7ec150109850e4","10ebdacd4ec7b3d913932dafc2163751","0815f16751a482e4609941d08014d57c","57abfbaa592ac3da0fa43ba71a582793","7937cee46561d7a7d10ca226be961c0e","ee2167b1a197b52191052da01f4a85b5","38b228e51e7cfa48904fbcb4a106d5b4","66f989018eabd937c731ddba40605146","05204f26f8d5161ab487dc41b78624b0","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("7d1f2798bd70c6cf04f5ad4de1aa68d2","f2752c991000ad9d807fcbe188f03695","d96c44db10ede8dc5c8df5b04bc5a5ab","3d5020f7ecef39be3f647f272f56c996","4c6ee0059bcbbf43f2afa4ee035067e0","4fa829b94199ee2cb19f517aedbb6aa3","47495e97a50b871628b9c8bc02373bdf","79f71e7de2b4cf306494723da6f1448e","e960ea87a9176c2a3f7b4f7acc5970ec","2e320a71235b9b3ce0983a4b54785c86","7fb0c391fd1f03ea7c9fe832a910648e","9307a671d95b466ff7f6f49cd547160c","ecadebd64791f51fa17a99e38fd92818","9d7c6846f6cca8286b8b326da1d8bd91","f2396285c26ffad12505537dcde9be7e","80886e4eeba4e683f5da925cd35289b6","7610c370369217965b7ec150109850e4","10ebdacd4ec7b3d913932dafc2163751","0815f16751a482e4609941d08014d57c","57abfbaa592ac3da0fa43ba71a582793","7937cee46561d7a7d10ca226be961c0e","ee2167b1a197b52191052da01f4a85b5","38b228e51e7cfa48904fbcb4a106d5b4","66f989018eabd937c731ddba40605146","05204f26f8d5161ab487dc41b78624b0","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("7d1f2798bd70c6cf04f5ad4de1aa68d2","f2752c991000ad9d807fcbe188f03695","d96c44db10ede8dc5c8df5b04bc5a5ab","3d5020f7ecef39be3f647f272f56c996","4c6ee0059bcbbf43f2afa4ee035067e0","4fa829b94199ee2cb19f517aedbb6aa3","47495e97a50b871628b9c8bc02373bdf","79f71e7de2b4cf306494723da6f1448e","e960ea87a9176c2a3f7b4f7acc5970ec","2e320a71235b9b3ce0983a4b54785c86","7fb0c391fd1f03ea7c9fe832a910648e","9307a671d95b466ff7f6f49cd547160c","ecadebd64791f51fa17a99e38fd92818","9d7c6846f6cca8286b8b326da1d8bd91","f2396285c26ffad12505537dcde9be7e","80886e4eeba4e683f5da925cd35289b6","7610c370369217965b7ec150109850e4","10ebdacd4ec7b3d913932dafc2163751","0815f16751a482e4609941d08014d57c","57abfbaa592ac3da0fa43ba71a582793","7937cee46561d7a7d10ca226be961c0e","ee2167b1a197b52191052da01f4a85b5","38b228e51e7cfa48904fbcb4a106d5b4","66f989018eabd937c731ddba40605146","05204f26f8d5161ab487dc41b78624b0","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79","ce7c58ee6070e056beeb490a7889ac27","5b5919db69b1912e0aaa9aca716d0857","a58a08ad2a24e8f17fa0b93cb4bcd71e","9d51bde04ad348c124b8264f9edf63cc","e594ee5fb2de33bed1cf31fa613e85fb","878e153056fb226e2501e238ad1c7663","feb0d1a302976b3591f17dca55462563","68baea12f969ce8eba88bf90e6c09d79")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("https://reaatuae.com/ec/prticroanuigm","https://advpopovic.rs/ia/lorsvaopciptousr","https://bladna24.ma/fsin/ssnaiueamdsala","https://haz-int.jp/rlt/vlileol","https://dorsica.com/dq/caafnofmii","https://marcoshueteortega.com/ie/snaplvbitouuton","https://vivaviajesyvuelos.com/in/oseet","https://eygcontadores.com.mx/ibo/trldmieoiomaoll","https://printhomebd.com/de/qtaumlaptuvoe","https://theilluminatigrandslodge.com/eq/ctencustouedtrnsere","https://mundogaming.ca/ots/xeetciamruept","https://thecovediningco.com.au/oree/oedmtlomrnuosr","https://momnaservices.com/ou/leoeoamirbataasb","https://jaipurkala.com/im/siapepvlutreataom","https://basefoto.com/np/oumsterson","https://solvetechsolution.co.in/er/maupaalisiq","https://africarise2020.com/iast/ncassstacuium")
