index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "peronikilinfer.com" OR destinationhostname CONTAINS "opewolumeras.com" OR destinationhostname CONTAINS "eniloramesta.com" OR destinationhostname CONTAINS "restoreviner.com" OR destinationhostname CONTAINS "rilomenifis.com" OR destinationhostname CONTAINS "isomicrotich.com" OR destinationhostname CONTAINS "tiguanin.com" OR destinationhostname CONTAINS "greshunka.com" OR destinationhostname CONTAINS "bazarunet.com" OR destinationhostname CONTAINS "obobobo.com" OR destinationhostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "peronikilinfer.com" OR sourcentdomain CONTAINS "opewolumeras.com" OR sourcentdomain CONTAINS "eniloramesta.com" OR sourcentdomain CONTAINS "restoreviner.com" OR sourcentdomain CONTAINS "rilomenifis.com" OR sourcentdomain CONTAINS "isomicrotich.com" OR sourcentdomain CONTAINS "tiguanin.com" OR sourcentdomain CONTAINS "greshunka.com" OR sourcentdomain CONTAINS "bazarunet.com" OR sourcentdomain CONTAINS "obobobo.com" OR sourcentdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "peronikilinfer.com" OR sourcehostname CONTAINS "opewolumeras.com" OR sourcehostname CONTAINS "eniloramesta.com" OR sourcehostname CONTAINS "restoreviner.com" OR sourcehostname CONTAINS "rilomenifis.com" OR sourcehostname CONTAINS "isomicrotich.com" OR sourcehostname CONTAINS "tiguanin.com" OR sourcehostname CONTAINS "greshunka.com" OR sourcehostname CONTAINS "bazarunet.com" OR sourcehostname CONTAINS "obobobo.com" OR sourcehostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "peronikilinfer.com" OR destinationntdomain CONTAINS "opewolumeras.com" OR destinationntdomain CONTAINS "eniloramesta.com" OR destinationntdomain CONTAINS "restoreviner.com" OR destinationntdomain CONTAINS "rilomenifis.com" OR destinationntdomain CONTAINS "isomicrotich.com" OR destinationntdomain CONTAINS "tiguanin.com" OR destinationntdomain CONTAINS "greshunka.com" OR destinationntdomain CONTAINS "bazarunet.com" OR destinationntdomain CONTAINS "obobobo.com" OR destinationntdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "peronikilinfer.com" OR requesturl CONTAINS "opewolumeras.com" OR requesturl CONTAINS "eniloramesta.com" OR requesturl CONTAINS "restoreviner.com" OR requesturl CONTAINS "rilomenifis.com" OR requesturl CONTAINS "isomicrotich.com" OR requesturl CONTAINS "tiguanin.com" OR requesturl CONTAINS "greshunka.com" OR requesturl CONTAINS "bazarunet.com" OR requesturl CONTAINS "obobobo.com" OR requesturl CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "peronikilinfer.com" OR destinationhostname CONTAINS "opewolumeras.com" OR destinationhostname CONTAINS "eniloramesta.com" OR destinationhostname CONTAINS "restoreviner.com" OR destinationhostname CONTAINS "rilomenifis.com" OR destinationhostname CONTAINS "isomicrotich.com" OR destinationhostname CONTAINS "tiguanin.com" OR destinationhostname CONTAINS "greshunka.com" OR destinationhostname CONTAINS "bazarunet.com" OR destinationhostname CONTAINS "obobobo.com" OR destinationhostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "peronikilinfer.com" OR sourcentdomain CONTAINS "opewolumeras.com" OR sourcentdomain CONTAINS "eniloramesta.com" OR sourcentdomain CONTAINS "restoreviner.com" OR sourcentdomain CONTAINS "rilomenifis.com" OR sourcentdomain CONTAINS "isomicrotich.com" OR sourcentdomain CONTAINS "tiguanin.com" OR sourcentdomain CONTAINS "greshunka.com" OR sourcentdomain CONTAINS "bazarunet.com" OR sourcentdomain CONTAINS "obobobo.com" OR sourcentdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "peronikilinfer.com" OR sourcehostname CONTAINS "opewolumeras.com" OR sourcehostname CONTAINS "eniloramesta.com" OR sourcehostname CONTAINS "restoreviner.com" OR sourcehostname CONTAINS "rilomenifis.com" OR sourcehostname CONTAINS "isomicrotich.com" OR sourcehostname CONTAINS "tiguanin.com" OR sourcehostname CONTAINS "greshunka.com" OR sourcehostname CONTAINS "bazarunet.com" OR sourcehostname CONTAINS "obobobo.com" OR sourcehostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "peronikilinfer.com" OR destinationntdomain CONTAINS "opewolumeras.com" OR destinationntdomain CONTAINS "eniloramesta.com" OR destinationntdomain CONTAINS "restoreviner.com" OR destinationntdomain CONTAINS "rilomenifis.com" OR destinationntdomain CONTAINS "isomicrotich.com" OR destinationntdomain CONTAINS "tiguanin.com" OR destinationntdomain CONTAINS "greshunka.com" OR destinationntdomain CONTAINS "bazarunet.com" OR destinationntdomain CONTAINS "obobobo.com" OR destinationntdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "peronikilinfer.com" OR requesturl CONTAINS "opewolumeras.com" OR requesturl CONTAINS "eniloramesta.com" OR requesturl CONTAINS "restoreviner.com" OR requesturl CONTAINS "rilomenifis.com" OR requesturl CONTAINS "isomicrotich.com" OR requesturl CONTAINS "tiguanin.com" OR requesturl CONTAINS "greshunka.com" OR requesturl CONTAINS "bazarunet.com" OR requesturl CONTAINS "obobobo.com" OR requesturl CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "peronikilinfer.com" OR destinationhostname CONTAINS "opewolumeras.com" OR destinationhostname CONTAINS "eniloramesta.com" OR destinationhostname CONTAINS "restoreviner.com" OR destinationhostname CONTAINS "rilomenifis.com" OR destinationhostname CONTAINS "isomicrotich.com" OR destinationhostname CONTAINS "tiguanin.com" OR destinationhostname CONTAINS "greshunka.com" OR destinationhostname CONTAINS "bazarunet.com" OR destinationhostname CONTAINS "obobobo.com" OR destinationhostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "peronikilinfer.com" OR sourcentdomain CONTAINS "opewolumeras.com" OR sourcentdomain CONTAINS "eniloramesta.com" OR sourcentdomain CONTAINS "restoreviner.com" OR sourcentdomain CONTAINS "rilomenifis.com" OR sourcentdomain CONTAINS "isomicrotich.com" OR sourcentdomain CONTAINS "tiguanin.com" OR sourcentdomain CONTAINS "greshunka.com" OR sourcentdomain CONTAINS "bazarunet.com" OR sourcentdomain CONTAINS "obobobo.com" OR sourcentdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "peronikilinfer.com" OR sourcehostname CONTAINS "opewolumeras.com" OR sourcehostname CONTAINS "eniloramesta.com" OR sourcehostname CONTAINS "restoreviner.com" OR sourcehostname CONTAINS "rilomenifis.com" OR sourcehostname CONTAINS "isomicrotich.com" OR sourcehostname CONTAINS "tiguanin.com" OR sourcehostname CONTAINS "greshunka.com" OR sourcehostname CONTAINS "bazarunet.com" OR sourcehostname CONTAINS "obobobo.com" OR sourcehostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "peronikilinfer.com" OR destinationntdomain CONTAINS "opewolumeras.com" OR destinationntdomain CONTAINS "eniloramesta.com" OR destinationntdomain CONTAINS "restoreviner.com" OR destinationntdomain CONTAINS "rilomenifis.com" OR destinationntdomain CONTAINS "isomicrotich.com" OR destinationntdomain CONTAINS "tiguanin.com" OR destinationntdomain CONTAINS "greshunka.com" OR destinationntdomain CONTAINS "bazarunet.com" OR destinationntdomain CONTAINS "obobobo.com" OR destinationntdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND (requesturl CONTAINS "peronikilinfer.com" OR requesturl CONTAINS "opewolumeras.com" OR requesturl CONTAINS "eniloramesta.com" OR requesturl CONTAINS "restoreviner.com" OR requesturl CONTAINS "rilomenifis.com" OR requesturl CONTAINS "isomicrotich.com" OR requesturl CONTAINS "tiguanin.com" OR requesturl CONTAINS "greshunka.com" OR requesturl CONTAINS "bazarunet.com" OR requesturl CONTAINS "obobobo.com" OR requesturl CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "peronikilinfer.com" OR destinationhostname CONTAINS "opewolumeras.com" OR destinationhostname CONTAINS "eniloramesta.com" OR destinationhostname CONTAINS "restoreviner.com" OR destinationhostname CONTAINS "rilomenifis.com" OR destinationhostname CONTAINS "isomicrotich.com" OR destinationhostname CONTAINS "tiguanin.com" OR destinationhostname CONTAINS "greshunka.com" OR destinationhostname CONTAINS "bazarunet.com" OR destinationhostname CONTAINS "obobobo.com" OR destinationhostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "peronikilinfer.com" OR sourcentdomain CONTAINS "opewolumeras.com" OR sourcentdomain CONTAINS "eniloramesta.com" OR sourcentdomain CONTAINS "restoreviner.com" OR sourcentdomain CONTAINS "rilomenifis.com" OR sourcentdomain CONTAINS "isomicrotich.com" OR sourcentdomain CONTAINS "tiguanin.com" OR sourcentdomain CONTAINS "greshunka.com" OR sourcentdomain CONTAINS "bazarunet.com" OR sourcentdomain CONTAINS "obobobo.com" OR sourcentdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "peronikilinfer.com" OR sourcehostname CONTAINS "opewolumeras.com" OR sourcehostname CONTAINS "eniloramesta.com" OR sourcehostname CONTAINS "restoreviner.com" OR sourcehostname CONTAINS "rilomenifis.com" OR sourcehostname CONTAINS "isomicrotich.com" OR sourcehostname CONTAINS "tiguanin.com" OR sourcehostname CONTAINS "greshunka.com" OR sourcehostname CONTAINS "bazarunet.com" OR sourcehostname CONTAINS "obobobo.com" OR sourcehostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "peronikilinfer.com" OR destinationntdomain CONTAINS "opewolumeras.com" OR destinationntdomain CONTAINS "eniloramesta.com" OR destinationntdomain CONTAINS "restoreviner.com" OR destinationntdomain CONTAINS "rilomenifis.com" OR destinationntdomain CONTAINS "isomicrotich.com" OR destinationntdomain CONTAINS "tiguanin.com" OR destinationntdomain CONTAINS "greshunka.com" OR destinationntdomain CONTAINS "bazarunet.com" OR destinationntdomain CONTAINS "obobobo.com" OR destinationntdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND (requesturl CONTAINS "peronikilinfer.com" OR requesturl CONTAINS "opewolumeras.com" OR requesturl CONTAINS "eniloramesta.com" OR requesturl CONTAINS "restoreviner.com" OR requesturl CONTAINS "rilomenifis.com" OR requesturl CONTAINS "isomicrotich.com" OR requesturl CONTAINS "tiguanin.com" OR requesturl CONTAINS "greshunka.com" OR requesturl CONTAINS "bazarunet.com" OR requesturl CONTAINS "obobobo.com" OR requesturl CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "peronikilinfer.com" OR destinationhostname CONTAINS "opewolumeras.com" OR destinationhostname CONTAINS "eniloramesta.com" OR destinationhostname CONTAINS "restoreviner.com" OR destinationhostname CONTAINS "rilomenifis.com" OR destinationhostname CONTAINS "isomicrotich.com" OR destinationhostname CONTAINS "tiguanin.com" OR destinationhostname CONTAINS "greshunka.com" OR destinationhostname CONTAINS "bazarunet.com" OR destinationhostname CONTAINS "obobobo.com" OR destinationhostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "peronikilinfer.com" OR sourcentdomain CONTAINS "opewolumeras.com" OR sourcentdomain CONTAINS "eniloramesta.com" OR sourcentdomain CONTAINS "restoreviner.com" OR sourcentdomain CONTAINS "rilomenifis.com" OR sourcentdomain CONTAINS "isomicrotich.com" OR sourcentdomain CONTAINS "tiguanin.com" OR sourcentdomain CONTAINS "greshunka.com" OR sourcentdomain CONTAINS "bazarunet.com" OR sourcentdomain CONTAINS "obobobo.com" OR sourcentdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "peronikilinfer.com" OR sourcehostname CONTAINS "opewolumeras.com" OR sourcehostname CONTAINS "eniloramesta.com" OR sourcehostname CONTAINS "restoreviner.com" OR sourcehostname CONTAINS "rilomenifis.com" OR sourcehostname CONTAINS "isomicrotich.com" OR sourcehostname CONTAINS "tiguanin.com" OR sourcehostname CONTAINS "greshunka.com" OR sourcehostname CONTAINS "bazarunet.com" OR sourcehostname CONTAINS "obobobo.com" OR sourcehostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "peronikilinfer.com" OR destinationntdomain CONTAINS "opewolumeras.com" OR destinationntdomain CONTAINS "eniloramesta.com" OR destinationntdomain CONTAINS "restoreviner.com" OR destinationntdomain CONTAINS "rilomenifis.com" OR destinationntdomain CONTAINS "isomicrotich.com" OR destinationntdomain CONTAINS "tiguanin.com" OR destinationntdomain CONTAINS "greshunka.com" OR destinationntdomain CONTAINS "bazarunet.com" OR destinationntdomain CONTAINS "obobobo.com" OR destinationntdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND (requesturl CONTAINS "peronikilinfer.com" OR requesturl CONTAINS "opewolumeras.com" OR requesturl CONTAINS "eniloramesta.com" OR requesturl CONTAINS "restoreviner.com" OR requesturl CONTAINS "rilomenifis.com" OR requesturl CONTAINS "isomicrotich.com" OR requesturl CONTAINS "tiguanin.com" OR requesturl CONTAINS "greshunka.com" OR requesturl CONTAINS "bazarunet.com" OR requesturl CONTAINS "obobobo.com" OR requesturl CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "peronikilinfer.com" OR destinationhostname CONTAINS "opewolumeras.com" OR destinationhostname CONTAINS "eniloramesta.com" OR destinationhostname CONTAINS "restoreviner.com" OR destinationhostname CONTAINS "rilomenifis.com" OR destinationhostname CONTAINS "isomicrotich.com" OR destinationhostname CONTAINS "tiguanin.com" OR destinationhostname CONTAINS "greshunka.com" OR destinationhostname CONTAINS "bazarunet.com" OR destinationhostname CONTAINS "obobobo.com" OR destinationhostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "peronikilinfer.com" OR sourcentdomain CONTAINS "opewolumeras.com" OR sourcentdomain CONTAINS "eniloramesta.com" OR sourcentdomain CONTAINS "restoreviner.com" OR sourcentdomain CONTAINS "rilomenifis.com" OR sourcentdomain CONTAINS "isomicrotich.com" OR sourcentdomain CONTAINS "tiguanin.com" OR sourcentdomain CONTAINS "greshunka.com" OR sourcentdomain CONTAINS "bazarunet.com" OR sourcentdomain CONTAINS "obobobo.com" OR sourcentdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "peronikilinfer.com" OR sourcehostname CONTAINS "opewolumeras.com" OR sourcehostname CONTAINS "eniloramesta.com" OR sourcehostname CONTAINS "restoreviner.com" OR sourcehostname CONTAINS "rilomenifis.com" OR sourcehostname CONTAINS "isomicrotich.com" OR sourcehostname CONTAINS "tiguanin.com" OR sourcehostname CONTAINS "greshunka.com" OR sourcehostname CONTAINS "bazarunet.com" OR sourcehostname CONTAINS "obobobo.com" OR sourcehostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "peronikilinfer.com" OR destinationntdomain CONTAINS "opewolumeras.com" OR destinationntdomain CONTAINS "eniloramesta.com" OR destinationntdomain CONTAINS "restoreviner.com" OR destinationntdomain CONTAINS "rilomenifis.com" OR destinationntdomain CONTAINS "isomicrotich.com" OR destinationntdomain CONTAINS "tiguanin.com" OR destinationntdomain CONTAINS "greshunka.com" OR destinationntdomain CONTAINS "bazarunet.com" OR destinationntdomain CONTAINS "obobobo.com" OR destinationntdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "peronikilinfer.com" OR requesturl CONTAINS "opewolumeras.com" OR requesturl CONTAINS "eniloramesta.com" OR requesturl CONTAINS "restoreviner.com" OR requesturl CONTAINS "rilomenifis.com" OR requesturl CONTAINS "isomicrotich.com" OR requesturl CONTAINS "tiguanin.com" OR requesturl CONTAINS "greshunka.com" OR requesturl CONTAINS "bazarunet.com" OR requesturl CONTAINS "obobobo.com" OR requesturl CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "peronikilinfer.com" OR destinationhostname CONTAINS "opewolumeras.com" OR destinationhostname CONTAINS "eniloramesta.com" OR destinationhostname CONTAINS "restoreviner.com" OR destinationhostname CONTAINS "rilomenifis.com" OR destinationhostname CONTAINS "isomicrotich.com" OR destinationhostname CONTAINS "tiguanin.com" OR destinationhostname CONTAINS "greshunka.com" OR destinationhostname CONTAINS "bazarunet.com" OR destinationhostname CONTAINS "obobobo.com" OR destinationhostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "peronikilinfer.com" OR sourcentdomain CONTAINS "opewolumeras.com" OR sourcentdomain CONTAINS "eniloramesta.com" OR sourcentdomain CONTAINS "restoreviner.com" OR sourcentdomain CONTAINS "rilomenifis.com" OR sourcentdomain CONTAINS "isomicrotich.com" OR sourcentdomain CONTAINS "tiguanin.com" OR sourcentdomain CONTAINS "greshunka.com" OR sourcentdomain CONTAINS "bazarunet.com" OR sourcentdomain CONTAINS "obobobo.com" OR sourcentdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "peronikilinfer.com" OR sourcehostname CONTAINS "opewolumeras.com" OR sourcehostname CONTAINS "eniloramesta.com" OR sourcehostname CONTAINS "restoreviner.com" OR sourcehostname CONTAINS "rilomenifis.com" OR sourcehostname CONTAINS "isomicrotich.com" OR sourcehostname CONTAINS "tiguanin.com" OR sourcehostname CONTAINS "greshunka.com" OR sourcehostname CONTAINS "bazarunet.com" OR sourcehostname CONTAINS "obobobo.com" OR sourcehostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "peronikilinfer.com" OR destinationntdomain CONTAINS "opewolumeras.com" OR destinationntdomain CONTAINS "eniloramesta.com" OR destinationntdomain CONTAINS "restoreviner.com" OR destinationntdomain CONTAINS "rilomenifis.com" OR destinationntdomain CONTAINS "isomicrotich.com" OR destinationntdomain CONTAINS "tiguanin.com" OR destinationntdomain CONTAINS "greshunka.com" OR destinationntdomain CONTAINS "bazarunet.com" OR destinationntdomain CONTAINS "obobobo.com" OR destinationntdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "peronikilinfer.com" OR requesturl CONTAINS "opewolumeras.com" OR requesturl CONTAINS "eniloramesta.com" OR requesturl CONTAINS "restoreviner.com" OR requesturl CONTAINS "rilomenifis.com" OR requesturl CONTAINS "isomicrotich.com" OR requesturl CONTAINS "tiguanin.com" OR requesturl CONTAINS "greshunka.com" OR requesturl CONTAINS "bazarunet.com" OR requesturl CONTAINS "obobobo.com" OR requesturl CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "peronikilinfer.com" OR destinationhostname CONTAINS "opewolumeras.com" OR destinationhostname CONTAINS "eniloramesta.com" OR destinationhostname CONTAINS "restoreviner.com" OR destinationhostname CONTAINS "rilomenifis.com" OR destinationhostname CONTAINS "isomicrotich.com" OR destinationhostname CONTAINS "tiguanin.com" OR destinationhostname CONTAINS "greshunka.com" OR destinationhostname CONTAINS "bazarunet.com" OR destinationhostname CONTAINS "obobobo.com" OR destinationhostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "peronikilinfer.com" OR sourcentdomain CONTAINS "opewolumeras.com" OR sourcentdomain CONTAINS "eniloramesta.com" OR sourcentdomain CONTAINS "restoreviner.com" OR sourcentdomain CONTAINS "rilomenifis.com" OR sourcentdomain CONTAINS "isomicrotich.com" OR sourcentdomain CONTAINS "tiguanin.com" OR sourcentdomain CONTAINS "greshunka.com" OR sourcentdomain CONTAINS "bazarunet.com" OR sourcentdomain CONTAINS "obobobo.com" OR sourcentdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "peronikilinfer.com" OR sourcehostname CONTAINS "opewolumeras.com" OR sourcehostname CONTAINS "eniloramesta.com" OR sourcehostname CONTAINS "restoreviner.com" OR sourcehostname CONTAINS "rilomenifis.com" OR sourcehostname CONTAINS "isomicrotich.com" OR sourcehostname CONTAINS "tiguanin.com" OR sourcehostname CONTAINS "greshunka.com" OR sourcehostname CONTAINS "bazarunet.com" OR sourcehostname CONTAINS "obobobo.com" OR sourcehostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "peronikilinfer.com" OR destinationntdomain CONTAINS "opewolumeras.com" OR destinationntdomain CONTAINS "eniloramesta.com" OR destinationntdomain CONTAINS "restoreviner.com" OR destinationntdomain CONTAINS "rilomenifis.com" OR destinationntdomain CONTAINS "isomicrotich.com" OR destinationntdomain CONTAINS "tiguanin.com" OR destinationntdomain CONTAINS "greshunka.com" OR destinationntdomain CONTAINS "bazarunet.com" OR destinationntdomain CONTAINS "obobobo.com" OR destinationntdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "peronikilinfer.com" OR requesturl CONTAINS "opewolumeras.com" OR requesturl CONTAINS "eniloramesta.com" OR requesturl CONTAINS "restoreviner.com" OR requesturl CONTAINS "rilomenifis.com" OR requesturl CONTAINS "isomicrotich.com" OR requesturl CONTAINS "tiguanin.com" OR requesturl CONTAINS "greshunka.com" OR requesturl CONTAINS "bazarunet.com" OR requesturl CONTAINS "obobobo.com" OR requesturl CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "peronikilinfer.com" OR destinationhostname CONTAINS "opewolumeras.com" OR destinationhostname CONTAINS "eniloramesta.com" OR destinationhostname CONTAINS "restoreviner.com" OR destinationhostname CONTAINS "rilomenifis.com" OR destinationhostname CONTAINS "isomicrotich.com" OR destinationhostname CONTAINS "tiguanin.com" OR destinationhostname CONTAINS "greshunka.com" OR destinationhostname CONTAINS "bazarunet.com" OR destinationhostname CONTAINS "obobobo.com" OR destinationhostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "peronikilinfer.com" OR sourcentdomain CONTAINS "opewolumeras.com" OR sourcentdomain CONTAINS "eniloramesta.com" OR sourcentdomain CONTAINS "restoreviner.com" OR sourcentdomain CONTAINS "rilomenifis.com" OR sourcentdomain CONTAINS "isomicrotich.com" OR sourcentdomain CONTAINS "tiguanin.com" OR sourcentdomain CONTAINS "greshunka.com" OR sourcentdomain CONTAINS "bazarunet.com" OR sourcentdomain CONTAINS "obobobo.com" OR sourcentdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "peronikilinfer.com" OR sourcehostname CONTAINS "opewolumeras.com" OR sourcehostname CONTAINS "eniloramesta.com" OR sourcehostname CONTAINS "restoreviner.com" OR sourcehostname CONTAINS "rilomenifis.com" OR sourcehostname CONTAINS "isomicrotich.com" OR sourcehostname CONTAINS "tiguanin.com" OR sourcehostname CONTAINS "greshunka.com" OR sourcehostname CONTAINS "bazarunet.com" OR sourcehostname CONTAINS "obobobo.com" OR sourcehostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "peronikilinfer.com" OR destinationntdomain CONTAINS "opewolumeras.com" OR destinationntdomain CONTAINS "eniloramesta.com" OR destinationntdomain CONTAINS "restoreviner.com" OR destinationntdomain CONTAINS "rilomenifis.com" OR destinationntdomain CONTAINS "isomicrotich.com" OR destinationntdomain CONTAINS "tiguanin.com" OR destinationntdomain CONTAINS "greshunka.com" OR destinationntdomain CONTAINS "bazarunet.com" OR destinationntdomain CONTAINS "obobobo.com" OR destinationntdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND (requesturl CONTAINS "peronikilinfer.com" OR requesturl CONTAINS "opewolumeras.com" OR requesturl CONTAINS "eniloramesta.com" OR requesturl CONTAINS "restoreviner.com" OR requesturl CONTAINS "rilomenifis.com" OR requesturl CONTAINS "isomicrotich.com" OR requesturl CONTAINS "tiguanin.com" OR requesturl CONTAINS "greshunka.com" OR requesturl CONTAINS "bazarunet.com" OR requesturl CONTAINS "obobobo.com" OR requesturl CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "peronikilinfer.com" OR destinationhostname CONTAINS "opewolumeras.com" OR destinationhostname CONTAINS "eniloramesta.com" OR destinationhostname CONTAINS "restoreviner.com" OR destinationhostname CONTAINS "rilomenifis.com" OR destinationhostname CONTAINS "isomicrotich.com" OR destinationhostname CONTAINS "tiguanin.com" OR destinationhostname CONTAINS "greshunka.com" OR destinationhostname CONTAINS "bazarunet.com" OR destinationhostname CONTAINS "obobobo.com" OR destinationhostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "peronikilinfer.com" OR sourcentdomain CONTAINS "opewolumeras.com" OR sourcentdomain CONTAINS "eniloramesta.com" OR sourcentdomain CONTAINS "restoreviner.com" OR sourcentdomain CONTAINS "rilomenifis.com" OR sourcentdomain CONTAINS "isomicrotich.com" OR sourcentdomain CONTAINS "tiguanin.com" OR sourcentdomain CONTAINS "greshunka.com" OR sourcentdomain CONTAINS "bazarunet.com" OR sourcentdomain CONTAINS "obobobo.com" OR sourcentdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "peronikilinfer.com" OR sourcehostname CONTAINS "opewolumeras.com" OR sourcehostname CONTAINS "eniloramesta.com" OR sourcehostname CONTAINS "restoreviner.com" OR sourcehostname CONTAINS "rilomenifis.com" OR sourcehostname CONTAINS "isomicrotich.com" OR sourcehostname CONTAINS "tiguanin.com" OR sourcehostname CONTAINS "greshunka.com" OR sourcehostname CONTAINS "bazarunet.com" OR sourcehostname CONTAINS "obobobo.com" OR sourcehostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "peronikilinfer.com" OR destinationntdomain CONTAINS "opewolumeras.com" OR destinationntdomain CONTAINS "eniloramesta.com" OR destinationntdomain CONTAINS "restoreviner.com" OR destinationntdomain CONTAINS "rilomenifis.com" OR destinationntdomain CONTAINS "isomicrotich.com" OR destinationntdomain CONTAINS "tiguanin.com" OR destinationntdomain CONTAINS "greshunka.com" OR destinationntdomain CONTAINS "bazarunet.com" OR destinationntdomain CONTAINS "obobobo.com" OR destinationntdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND (requesturl CONTAINS "peronikilinfer.com" OR requesturl CONTAINS "opewolumeras.com" OR requesturl CONTAINS "eniloramesta.com" OR requesturl CONTAINS "restoreviner.com" OR requesturl CONTAINS "rilomenifis.com" OR requesturl CONTAINS "isomicrotich.com" OR requesturl CONTAINS "tiguanin.com" OR requesturl CONTAINS "greshunka.com" OR requesturl CONTAINS "bazarunet.com" OR requesturl CONTAINS "obobobo.com" OR requesturl CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "peronikilinfer.com" OR destinationhostname CONTAINS "opewolumeras.com" OR destinationhostname CONTAINS "eniloramesta.com" OR destinationhostname CONTAINS "restoreviner.com" OR destinationhostname CONTAINS "rilomenifis.com" OR destinationhostname CONTAINS "isomicrotich.com" OR destinationhostname CONTAINS "tiguanin.com" OR destinationhostname CONTAINS "greshunka.com" OR destinationhostname CONTAINS "bazarunet.com" OR destinationhostname CONTAINS "obobobo.com" OR destinationhostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "peronikilinfer.com" OR sourcentdomain CONTAINS "opewolumeras.com" OR sourcentdomain CONTAINS "eniloramesta.com" OR sourcentdomain CONTAINS "restoreviner.com" OR sourcentdomain CONTAINS "rilomenifis.com" OR sourcentdomain CONTAINS "isomicrotich.com" OR sourcentdomain CONTAINS "tiguanin.com" OR sourcentdomain CONTAINS "greshunka.com" OR sourcentdomain CONTAINS "bazarunet.com" OR sourcentdomain CONTAINS "obobobo.com" OR sourcentdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "peronikilinfer.com" OR sourcehostname CONTAINS "opewolumeras.com" OR sourcehostname CONTAINS "eniloramesta.com" OR sourcehostname CONTAINS "restoreviner.com" OR sourcehostname CONTAINS "rilomenifis.com" OR sourcehostname CONTAINS "isomicrotich.com" OR sourcehostname CONTAINS "tiguanin.com" OR sourcehostname CONTAINS "greshunka.com" OR sourcehostname CONTAINS "bazarunet.com" OR sourcehostname CONTAINS "obobobo.com" OR sourcehostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "peronikilinfer.com" OR destinationntdomain CONTAINS "opewolumeras.com" OR destinationntdomain CONTAINS "eniloramesta.com" OR destinationntdomain CONTAINS "restoreviner.com" OR destinationntdomain CONTAINS "rilomenifis.com" OR destinationntdomain CONTAINS "isomicrotich.com" OR destinationntdomain CONTAINS "tiguanin.com" OR destinationntdomain CONTAINS "greshunka.com" OR destinationntdomain CONTAINS "bazarunet.com" OR destinationntdomain CONTAINS "obobobo.com" OR destinationntdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND (requesturl CONTAINS "peronikilinfer.com" OR requesturl CONTAINS "opewolumeras.com" OR requesturl CONTAINS "eniloramesta.com" OR requesturl CONTAINS "restoreviner.com" OR requesturl CONTAINS "rilomenifis.com" OR requesturl CONTAINS "isomicrotich.com" OR requesturl CONTAINS "tiguanin.com" OR requesturl CONTAINS "greshunka.com" OR requesturl CONTAINS "bazarunet.com" OR requesturl CONTAINS "obobobo.com" OR requesturl CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "peronikilinfer.com" OR destinationhostname CONTAINS "opewolumeras.com" OR destinationhostname CONTAINS "eniloramesta.com" OR destinationhostname CONTAINS "restoreviner.com" OR destinationhostname CONTAINS "rilomenifis.com" OR destinationhostname CONTAINS "isomicrotich.com" OR destinationhostname CONTAINS "tiguanin.com" OR destinationhostname CONTAINS "greshunka.com" OR destinationhostname CONTAINS "bazarunet.com" OR destinationhostname CONTAINS "obobobo.com" OR destinationhostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "peronikilinfer.com" OR sourcentdomain CONTAINS "opewolumeras.com" OR sourcentdomain CONTAINS "eniloramesta.com" OR sourcentdomain CONTAINS "restoreviner.com" OR sourcentdomain CONTAINS "rilomenifis.com" OR sourcentdomain CONTAINS "isomicrotich.com" OR sourcentdomain CONTAINS "tiguanin.com" OR sourcentdomain CONTAINS "greshunka.com" OR sourcentdomain CONTAINS "bazarunet.com" OR sourcentdomain CONTAINS "obobobo.com" OR sourcentdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "peronikilinfer.com" OR sourcehostname CONTAINS "opewolumeras.com" OR sourcehostname CONTAINS "eniloramesta.com" OR sourcehostname CONTAINS "restoreviner.com" OR sourcehostname CONTAINS "rilomenifis.com" OR sourcehostname CONTAINS "isomicrotich.com" OR sourcehostname CONTAINS "tiguanin.com" OR sourcehostname CONTAINS "greshunka.com" OR sourcehostname CONTAINS "bazarunet.com" OR sourcehostname CONTAINS "obobobo.com" OR sourcehostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "peronikilinfer.com" OR destinationntdomain CONTAINS "opewolumeras.com" OR destinationntdomain CONTAINS "eniloramesta.com" OR destinationntdomain CONTAINS "restoreviner.com" OR destinationntdomain CONTAINS "rilomenifis.com" OR destinationntdomain CONTAINS "isomicrotich.com" OR destinationntdomain CONTAINS "tiguanin.com" OR destinationntdomain CONTAINS "greshunka.com" OR destinationntdomain CONTAINS "bazarunet.com" OR destinationntdomain CONTAINS "obobobo.com" OR destinationntdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "peronikilinfer.com" OR requesturl CONTAINS "opewolumeras.com" OR requesturl CONTAINS "eniloramesta.com" OR requesturl CONTAINS "restoreviner.com" OR requesturl CONTAINS "rilomenifis.com" OR requesturl CONTAINS "isomicrotich.com" OR requesturl CONTAINS "tiguanin.com" OR requesturl CONTAINS "greshunka.com" OR requesturl CONTAINS "bazarunet.com" OR requesturl CONTAINS "obobobo.com" OR requesturl CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "peronikilinfer.com" OR destinationhostname CONTAINS "opewolumeras.com" OR destinationhostname CONTAINS "eniloramesta.com" OR destinationhostname CONTAINS "restoreviner.com" OR destinationhostname CONTAINS "rilomenifis.com" OR destinationhostname CONTAINS "isomicrotich.com" OR destinationhostname CONTAINS "tiguanin.com" OR destinationhostname CONTAINS "greshunka.com" OR destinationhostname CONTAINS "bazarunet.com" OR destinationhostname CONTAINS "obobobo.com" OR destinationhostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "peronikilinfer.com" OR sourcentdomain CONTAINS "opewolumeras.com" OR sourcentdomain CONTAINS "eniloramesta.com" OR sourcentdomain CONTAINS "restoreviner.com" OR sourcentdomain CONTAINS "rilomenifis.com" OR sourcentdomain CONTAINS "isomicrotich.com" OR sourcentdomain CONTAINS "tiguanin.com" OR sourcentdomain CONTAINS "greshunka.com" OR sourcentdomain CONTAINS "bazarunet.com" OR sourcentdomain CONTAINS "obobobo.com" OR sourcentdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "peronikilinfer.com" OR sourcehostname CONTAINS "opewolumeras.com" OR sourcehostname CONTAINS "eniloramesta.com" OR sourcehostname CONTAINS "restoreviner.com" OR sourcehostname CONTAINS "rilomenifis.com" OR sourcehostname CONTAINS "isomicrotich.com" OR sourcehostname CONTAINS "tiguanin.com" OR sourcehostname CONTAINS "greshunka.com" OR sourcehostname CONTAINS "bazarunet.com" OR sourcehostname CONTAINS "obobobo.com" OR sourcehostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "peronikilinfer.com" OR destinationntdomain CONTAINS "opewolumeras.com" OR destinationntdomain CONTAINS "eniloramesta.com" OR destinationntdomain CONTAINS "restoreviner.com" OR destinationntdomain CONTAINS "rilomenifis.com" OR destinationntdomain CONTAINS "isomicrotich.com" OR destinationntdomain CONTAINS "tiguanin.com" OR destinationntdomain CONTAINS "greshunka.com" OR destinationntdomain CONTAINS "bazarunet.com" OR destinationntdomain CONTAINS "obobobo.com" OR destinationntdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND (requesturl CONTAINS "peronikilinfer.com" OR requesturl CONTAINS "opewolumeras.com" OR requesturl CONTAINS "eniloramesta.com" OR requesturl CONTAINS "restoreviner.com" OR requesturl CONTAINS "rilomenifis.com" OR requesturl CONTAINS "isomicrotich.com" OR requesturl CONTAINS "tiguanin.com" OR requesturl CONTAINS "greshunka.com" OR requesturl CONTAINS "bazarunet.com" OR requesturl CONTAINS "obobobo.com" OR requesturl CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "peronikilinfer.com" OR destinationhostname CONTAINS "opewolumeras.com" OR destinationhostname CONTAINS "eniloramesta.com" OR destinationhostname CONTAINS "restoreviner.com" OR destinationhostname CONTAINS "rilomenifis.com" OR destinationhostname CONTAINS "isomicrotich.com" OR destinationhostname CONTAINS "tiguanin.com" OR destinationhostname CONTAINS "greshunka.com" OR destinationhostname CONTAINS "bazarunet.com" OR destinationhostname CONTAINS "obobobo.com" OR destinationhostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "peronikilinfer.com" OR sourcentdomain CONTAINS "opewolumeras.com" OR sourcentdomain CONTAINS "eniloramesta.com" OR sourcentdomain CONTAINS "restoreviner.com" OR sourcentdomain CONTAINS "rilomenifis.com" OR sourcentdomain CONTAINS "isomicrotich.com" OR sourcentdomain CONTAINS "tiguanin.com" OR sourcentdomain CONTAINS "greshunka.com" OR sourcentdomain CONTAINS "bazarunet.com" OR sourcentdomain CONTAINS "obobobo.com" OR sourcentdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "peronikilinfer.com" OR sourcehostname CONTAINS "opewolumeras.com" OR sourcehostname CONTAINS "eniloramesta.com" OR sourcehostname CONTAINS "restoreviner.com" OR sourcehostname CONTAINS "rilomenifis.com" OR sourcehostname CONTAINS "isomicrotich.com" OR sourcehostname CONTAINS "tiguanin.com" OR sourcehostname CONTAINS "greshunka.com" OR sourcehostname CONTAINS "bazarunet.com" OR sourcehostname CONTAINS "obobobo.com" OR sourcehostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "peronikilinfer.com" OR destinationntdomain CONTAINS "opewolumeras.com" OR destinationntdomain CONTAINS "eniloramesta.com" OR destinationntdomain CONTAINS "restoreviner.com" OR destinationntdomain CONTAINS "rilomenifis.com" OR destinationntdomain CONTAINS "isomicrotich.com" OR destinationntdomain CONTAINS "tiguanin.com" OR destinationntdomain CONTAINS "greshunka.com" OR destinationntdomain CONTAINS "bazarunet.com" OR destinationntdomain CONTAINS "obobobo.com" OR destinationntdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "peronikilinfer.com" OR requesturl CONTAINS "opewolumeras.com" OR requesturl CONTAINS "eniloramesta.com" OR requesturl CONTAINS "restoreviner.com" OR requesturl CONTAINS "rilomenifis.com" OR requesturl CONTAINS "isomicrotich.com" OR requesturl CONTAINS "tiguanin.com" OR requesturl CONTAINS "greshunka.com" OR requesturl CONTAINS "bazarunet.com" OR requesturl CONTAINS "obobobo.com" OR requesturl CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "peronikilinfer.com" OR destinationhostname CONTAINS "opewolumeras.com" OR destinationhostname CONTAINS "eniloramesta.com" OR destinationhostname CONTAINS "restoreviner.com" OR destinationhostname CONTAINS "rilomenifis.com" OR destinationhostname CONTAINS "isomicrotich.com" OR destinationhostname CONTAINS "tiguanin.com" OR destinationhostname CONTAINS "greshunka.com" OR destinationhostname CONTAINS "bazarunet.com" OR destinationhostname CONTAINS "obobobo.com" OR destinationhostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "peronikilinfer.com" OR sourcentdomain CONTAINS "opewolumeras.com" OR sourcentdomain CONTAINS "eniloramesta.com" OR sourcentdomain CONTAINS "restoreviner.com" OR sourcentdomain CONTAINS "rilomenifis.com" OR sourcentdomain CONTAINS "isomicrotich.com" OR sourcentdomain CONTAINS "tiguanin.com" OR sourcentdomain CONTAINS "greshunka.com" OR sourcentdomain CONTAINS "bazarunet.com" OR sourcentdomain CONTAINS "obobobo.com" OR sourcentdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "peronikilinfer.com" OR sourcehostname CONTAINS "opewolumeras.com" OR sourcehostname CONTAINS "eniloramesta.com" OR sourcehostname CONTAINS "restoreviner.com" OR sourcehostname CONTAINS "rilomenifis.com" OR sourcehostname CONTAINS "isomicrotich.com" OR sourcehostname CONTAINS "tiguanin.com" OR sourcehostname CONTAINS "greshunka.com" OR sourcehostname CONTAINS "bazarunet.com" OR sourcehostname CONTAINS "obobobo.com" OR sourcehostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "peronikilinfer.com" OR destinationntdomain CONTAINS "opewolumeras.com" OR destinationntdomain CONTAINS "eniloramesta.com" OR destinationntdomain CONTAINS "restoreviner.com" OR destinationntdomain CONTAINS "rilomenifis.com" OR destinationntdomain CONTAINS "isomicrotich.com" OR destinationntdomain CONTAINS "tiguanin.com" OR destinationntdomain CONTAINS "greshunka.com" OR destinationntdomain CONTAINS "bazarunet.com" OR destinationntdomain CONTAINS "obobobo.com" OR destinationntdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND (requesturl CONTAINS "peronikilinfer.com" OR requesturl CONTAINS "opewolumeras.com" OR requesturl CONTAINS "eniloramesta.com" OR requesturl CONTAINS "restoreviner.com" OR requesturl CONTAINS "rilomenifis.com" OR requesturl CONTAINS "isomicrotich.com" OR requesturl CONTAINS "tiguanin.com" OR requesturl CONTAINS "greshunka.com" OR requesturl CONTAINS "bazarunet.com" OR requesturl CONTAINS "obobobo.com" OR requesturl CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "peronikilinfer.com" OR destinationhostname CONTAINS "opewolumeras.com" OR destinationhostname CONTAINS "eniloramesta.com" OR destinationhostname CONTAINS "restoreviner.com" OR destinationhostname CONTAINS "rilomenifis.com" OR destinationhostname CONTAINS "isomicrotich.com" OR destinationhostname CONTAINS "tiguanin.com" OR destinationhostname CONTAINS "greshunka.com" OR destinationhostname CONTAINS "bazarunet.com" OR destinationhostname CONTAINS "obobobo.com" OR destinationhostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "peronikilinfer.com" OR sourcentdomain CONTAINS "opewolumeras.com" OR sourcentdomain CONTAINS "eniloramesta.com" OR sourcentdomain CONTAINS "restoreviner.com" OR sourcentdomain CONTAINS "rilomenifis.com" OR sourcentdomain CONTAINS "isomicrotich.com" OR sourcentdomain CONTAINS "tiguanin.com" OR sourcentdomain CONTAINS "greshunka.com" OR sourcentdomain CONTAINS "bazarunet.com" OR sourcentdomain CONTAINS "obobobo.com" OR sourcentdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "peronikilinfer.com" OR sourcehostname CONTAINS "opewolumeras.com" OR sourcehostname CONTAINS "eniloramesta.com" OR sourcehostname CONTAINS "restoreviner.com" OR sourcehostname CONTAINS "rilomenifis.com" OR sourcehostname CONTAINS "isomicrotich.com" OR sourcehostname CONTAINS "tiguanin.com" OR sourcehostname CONTAINS "greshunka.com" OR sourcehostname CONTAINS "bazarunet.com" OR sourcehostname CONTAINS "obobobo.com" OR sourcehostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "peronikilinfer.com" OR destinationntdomain CONTAINS "opewolumeras.com" OR destinationntdomain CONTAINS "eniloramesta.com" OR destinationntdomain CONTAINS "restoreviner.com" OR destinationntdomain CONTAINS "rilomenifis.com" OR destinationntdomain CONTAINS "isomicrotich.com" OR destinationntdomain CONTAINS "tiguanin.com" OR destinationntdomain CONTAINS "greshunka.com" OR destinationntdomain CONTAINS "bazarunet.com" OR destinationntdomain CONTAINS "obobobo.com" OR destinationntdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND (requesturl CONTAINS "peronikilinfer.com" OR requesturl CONTAINS "opewolumeras.com" OR requesturl CONTAINS "eniloramesta.com" OR requesturl CONTAINS "restoreviner.com" OR requesturl CONTAINS "rilomenifis.com" OR requesturl CONTAINS "isomicrotich.com" OR requesturl CONTAINS "tiguanin.com" OR requesturl CONTAINS "greshunka.com" OR requesturl CONTAINS "bazarunet.com" OR requesturl CONTAINS "obobobo.com" OR requesturl CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "peronikilinfer.com" OR destinationhostname CONTAINS "opewolumeras.com" OR destinationhostname CONTAINS "eniloramesta.com" OR destinationhostname CONTAINS "restoreviner.com" OR destinationhostname CONTAINS "rilomenifis.com" OR destinationhostname CONTAINS "isomicrotich.com" OR destinationhostname CONTAINS "tiguanin.com" OR destinationhostname CONTAINS "greshunka.com" OR destinationhostname CONTAINS "bazarunet.com" OR destinationhostname CONTAINS "obobobo.com" OR destinationhostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "peronikilinfer.com" OR sourcentdomain CONTAINS "opewolumeras.com" OR sourcentdomain CONTAINS "eniloramesta.com" OR sourcentdomain CONTAINS "restoreviner.com" OR sourcentdomain CONTAINS "rilomenifis.com" OR sourcentdomain CONTAINS "isomicrotich.com" OR sourcentdomain CONTAINS "tiguanin.com" OR sourcentdomain CONTAINS "greshunka.com" OR sourcentdomain CONTAINS "bazarunet.com" OR sourcentdomain CONTAINS "obobobo.com" OR sourcentdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "peronikilinfer.com" OR sourcehostname CONTAINS "opewolumeras.com" OR sourcehostname CONTAINS "eniloramesta.com" OR sourcehostname CONTAINS "restoreviner.com" OR sourcehostname CONTAINS "rilomenifis.com" OR sourcehostname CONTAINS "isomicrotich.com" OR sourcehostname CONTAINS "tiguanin.com" OR sourcehostname CONTAINS "greshunka.com" OR sourcehostname CONTAINS "bazarunet.com" OR sourcehostname CONTAINS "obobobo.com" OR sourcehostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "peronikilinfer.com" OR destinationntdomain CONTAINS "opewolumeras.com" OR destinationntdomain CONTAINS "eniloramesta.com" OR destinationntdomain CONTAINS "restoreviner.com" OR destinationntdomain CONTAINS "rilomenifis.com" OR destinationntdomain CONTAINS "isomicrotich.com" OR destinationntdomain CONTAINS "tiguanin.com" OR destinationntdomain CONTAINS "greshunka.com" OR destinationntdomain CONTAINS "bazarunet.com" OR destinationntdomain CONTAINS "obobobo.com" OR destinationntdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "peronikilinfer.com" OR requesturl CONTAINS "opewolumeras.com" OR requesturl CONTAINS "eniloramesta.com" OR requesturl CONTAINS "restoreviner.com" OR requesturl CONTAINS "rilomenifis.com" OR requesturl CONTAINS "isomicrotich.com" OR requesturl CONTAINS "tiguanin.com" OR requesturl CONTAINS "greshunka.com" OR requesturl CONTAINS "bazarunet.com" OR requesturl CONTAINS "obobobo.com" OR requesturl CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="DNS / DHCP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "peronikilinfer.com" OR destinationhostname CONTAINS "opewolumeras.com" OR destinationhostname CONTAINS "eniloramesta.com" OR destinationhostname CONTAINS "restoreviner.com" OR destinationhostname CONTAINS "rilomenifis.com" OR destinationhostname CONTAINS "isomicrotich.com" OR destinationhostname CONTAINS "tiguanin.com" OR destinationhostname CONTAINS "greshunka.com" OR destinationhostname CONTAINS "bazarunet.com" OR destinationhostname CONTAINS "obobobo.com" OR destinationhostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="DNS / DHCP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "peronikilinfer.com" OR sourcentdomain CONTAINS "opewolumeras.com" OR sourcentdomain CONTAINS "eniloramesta.com" OR sourcentdomain CONTAINS "restoreviner.com" OR sourcentdomain CONTAINS "rilomenifis.com" OR sourcentdomain CONTAINS "isomicrotich.com" OR sourcentdomain CONTAINS "tiguanin.com" OR sourcentdomain CONTAINS "greshunka.com" OR sourcentdomain CONTAINS "bazarunet.com" OR sourcentdomain CONTAINS "obobobo.com" OR sourcentdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="DNS / DHCP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "peronikilinfer.com" OR sourcehostname CONTAINS "opewolumeras.com" OR sourcehostname CONTAINS "eniloramesta.com" OR sourcehostname CONTAINS "restoreviner.com" OR sourcehostname CONTAINS "rilomenifis.com" OR sourcehostname CONTAINS "isomicrotich.com" OR sourcehostname CONTAINS "tiguanin.com" OR sourcehostname CONTAINS "greshunka.com" OR sourcehostname CONTAINS "bazarunet.com" OR sourcehostname CONTAINS "obobobo.com" OR sourcehostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="DNS / DHCP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "peronikilinfer.com" OR destinationntdomain CONTAINS "opewolumeras.com" OR destinationntdomain CONTAINS "eniloramesta.com" OR destinationntdomain CONTAINS "restoreviner.com" OR destinationntdomain CONTAINS "rilomenifis.com" OR destinationntdomain CONTAINS "isomicrotich.com" OR destinationntdomain CONTAINS "tiguanin.com" OR destinationntdomain CONTAINS "greshunka.com" OR destinationntdomain CONTAINS "bazarunet.com" OR destinationntdomain CONTAINS "obobobo.com" OR destinationntdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND (requesturl CONTAINS "peronikilinfer.com" OR requesturl CONTAINS "opewolumeras.com" OR requesturl CONTAINS "eniloramesta.com" OR requesturl CONTAINS "restoreviner.com" OR requesturl CONTAINS "rilomenifis.com" OR requesturl CONTAINS "isomicrotich.com" OR requesturl CONTAINS "tiguanin.com" OR requesturl CONTAINS "greshunka.com" OR requesturl CONTAINS "bazarunet.com" OR requesturl CONTAINS "obobobo.com" OR requesturl CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "peronikilinfer.com" OR destinationhostname CONTAINS "opewolumeras.com" OR destinationhostname CONTAINS "eniloramesta.com" OR destinationhostname CONTAINS "restoreviner.com" OR destinationhostname CONTAINS "rilomenifis.com" OR destinationhostname CONTAINS "isomicrotich.com" OR destinationhostname CONTAINS "tiguanin.com" OR destinationhostname CONTAINS "greshunka.com" OR destinationhostname CONTAINS "bazarunet.com" OR destinationhostname CONTAINS "obobobo.com" OR destinationhostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "peronikilinfer.com" OR sourcentdomain CONTAINS "opewolumeras.com" OR sourcentdomain CONTAINS "eniloramesta.com" OR sourcentdomain CONTAINS "restoreviner.com" OR sourcentdomain CONTAINS "rilomenifis.com" OR sourcentdomain CONTAINS "isomicrotich.com" OR sourcentdomain CONTAINS "tiguanin.com" OR sourcentdomain CONTAINS "greshunka.com" OR sourcentdomain CONTAINS "bazarunet.com" OR sourcentdomain CONTAINS "obobobo.com" OR sourcentdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "peronikilinfer.com" OR sourcehostname CONTAINS "opewolumeras.com" OR sourcehostname CONTAINS "eniloramesta.com" OR sourcehostname CONTAINS "restoreviner.com" OR sourcehostname CONTAINS "rilomenifis.com" OR sourcehostname CONTAINS "isomicrotich.com" OR sourcehostname CONTAINS "tiguanin.com" OR sourcehostname CONTAINS "greshunka.com" OR sourcehostname CONTAINS "bazarunet.com" OR sourcehostname CONTAINS "obobobo.com" OR sourcehostname CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "peronikilinfer.com" OR destinationntdomain CONTAINS "opewolumeras.com" OR destinationntdomain CONTAINS "eniloramesta.com" OR destinationntdomain CONTAINS "restoreviner.com" OR destinationntdomain CONTAINS "rilomenifis.com" OR destinationntdomain CONTAINS "isomicrotich.com" OR destinationntdomain CONTAINS "tiguanin.com" OR destinationntdomain CONTAINS "greshunka.com" OR destinationntdomain CONTAINS "bazarunet.com" OR destinationntdomain CONTAINS "obobobo.com" OR destinationntdomain CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND (requesturl CONTAINS "peronikilinfer.com" OR requesturl CONTAINS "opewolumeras.com" OR requesturl CONTAINS "eniloramesta.com" OR requesturl CONTAINS "restoreviner.com" OR requesturl CONTAINS "rilomenifis.com" OR requesturl CONTAINS "isomicrotich.com" OR requesturl CONTAINS "tiguanin.com" OR requesturl CONTAINS "greshunka.com" OR requesturl CONTAINS "bazarunet.com" OR requesturl CONTAINS "obobobo.com" OR requesturl CONTAINS "sosachwaffen.com")
index=activity AND rg_functionality="Next Generation Firewall" AND filehash NOT NULL AND filehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Next Generation Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring64 NOT NULL AND customstring64 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Firewall" AND filehash NOT NULL AND filehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Firewall" AND customstring64 NOT NULL AND customstring64 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Web Proxy" AND filehash NOT NULL AND filehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Web Proxy" AND oldfilehash NOT NULL AND oldfilehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Web Proxy" AND customstring64 NOT NULL AND customstring64 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Flow" AND filehash NOT NULL AND filehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Flow" AND oldfilehash NOT NULL AND oldfilehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Flow" AND customstring64 NOT NULL AND customstring64 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Web Server" AND filehash NOT NULL AND filehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Web Server" AND oldfilehash NOT NULL AND oldfilehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Web Server" AND customstring64 NOT NULL AND customstring64 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Web Application Firewall" AND filehash NOT NULL AND filehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Web Application Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Web Application Firewall" AND customstring64 NOT NULL AND customstring64 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Endpoint management systems" AND filehash NOT NULL AND filehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Endpoint management systems" AND oldfilehash NOT NULL AND oldfilehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Endpoint management systems" AND customstring64 NOT NULL AND customstring64 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Cloud Application Audit" AND filehash NOT NULL AND filehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Cloud Application Audit" AND oldfilehash NOT NULL AND oldfilehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring64 NOT NULL AND customstring64 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Unix / Linux / AIX" AND filehash NOT NULL AND filehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Unix / Linux / AIX" AND oldfilehash NOT NULL AND oldfilehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring64 NOT NULL AND customstring64 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Cloud Application Security Broker" AND filehash NOT NULL AND filehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Cloud Application Security Broker" AND oldfilehash NOT NULL AND oldfilehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring64 NOT NULL AND customstring64 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Source Code Repository" AND filehash NOT NULL AND filehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Source Code Repository" AND oldfilehash NOT NULL AND oldfilehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Source Code Repository" AND customstring64 NOT NULL AND customstring64 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="DNS / DHCP" AND filehash NOT NULL AND filehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="DNS / DHCP" AND oldfilehash NOT NULL AND oldfilehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="DNS / DHCP" AND customstring3 NOT NULL AND customstring3 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="DNS / DHCP" AND customstring64 NOT NULL AND customstring64 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND filehash NOT NULL AND filehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND oldfilehash NOT NULL AND oldfilehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring64 NOT NULL AND customstring64 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("937d07239cbfee2d34b7f1fae762ac72b52fb2b710e87e02fa758f452aa62913","6dabcf67c89c50116c4e8ae0fafb003139c21b3af84e23b57e16a975b7c2341f","fb242f64edbf8ae36a4cf5a80ba8f21956409b448eb0380949bb9152373db981","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa","ea1792f689bfe5ad3597c7f877b66f9fcf80d732e5233293d52d374d50cab991","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","28f5e949ecad3606c430cea5a34d0f3e7218f239bcfa758a834dceb649e78abc","29549b75a198ad3aee4f8b9ea328bc9a73eb0e0d07e36775438bbe7268d453f9","c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7","1b9e17bfbd292075956cc2006983f91e17aed94ebbb0fb370bf83d23b14289fa")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Firewall" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Endpoint management systems" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Endpoint management systems" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Application Audit" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Application Audit" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Unix / Linux / AIX" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Unix / Linux / AIX" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="DNS / DHCP" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="DNS / DHCP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="DNS / DHCP" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("https://qasertol.club/forms-pubs/about-form-w-2/?msclkid=58393294f21c1006efe854eff1b652d5","https://grupotefex.com/forms-pubs/about-form-w-4/?msclkid=275de1ee6e9c11cb920c879bf6a21339","http://45.14.244.124/dsa.msi","http://188.119.112.7/das.msi","http://95.164.17.212/best.msi","https://188.119.112.115/dlpagent.msi","http://188.119.113.152/citroen.msi","http://193.32.177.192/vpn.msi")
