index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("586F30907C3849C363145BFDCDABE3E2E4688CBD5688FF968E984B201B474730","8ce219552e235dcaf1c694be122d6339ed4ff8df70bf358cd165e6eb487ccfc5","c2904dc8bbb569536c742fca0c51a766e836d0da8fac1c1abd99744e9b50164f","dda53eee2c5cb0abdbf5242f5e82f4de83898b6a9dd8aa935c2be29bafc9a469","90fb0cd574155fd8667d20f97ac464eca67bdb6a8ee64184159362d45d79b6a4","f226086b5959eb96bd30dec0ffcbf0f09186cd11721507f416f1c39901addafb","16F413862EFDA3ABA631D8A7AE2BFFF6D84ACD9F454A7ADAA518C7A8A6F375A5","05732E84DE58A3CC142535431B3AA04EFBE034CC96E837F93C360A6387D8FAAD","6FBB771CD168B5D076525805D010AE0CD73B39AB1F4E6693148FE18B8F73090B","912018AB3C6B16B39EE84F17745FF0C80A33CEE241013EC35D0281E40C0658D9","CAF6739D50366E18C855E2206A86F64DA90EC1CDF3E309AEB18AC22C6E28DC65","2963a90eb9e499258a67d8231a3124021b42e6c70dacd3aab36746e51e3ce37e","2AA1BBBE47F04627A8EA4E8718AD21F0D50ADF6A32BA4E6133EE46CE2CD13780","5A73FDD0C4D0DEEA80FA13121503B477597761D82CF2CFB0E9D8DF469357E3F8","C92C158D7C37FEA795114FA6491FE5F145AD2F8C08776B18AE79DB811E8E36A3")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("586F30907C3849C363145BFDCDABE3E2E4688CBD5688FF968E984B201B474730","8ce219552e235dcaf1c694be122d6339ed4ff8df70bf358cd165e6eb487ccfc5","c2904dc8bbb569536c742fca0c51a766e836d0da8fac1c1abd99744e9b50164f","dda53eee2c5cb0abdbf5242f5e82f4de83898b6a9dd8aa935c2be29bafc9a469","90fb0cd574155fd8667d20f97ac464eca67bdb6a8ee64184159362d45d79b6a4","f226086b5959eb96bd30dec0ffcbf0f09186cd11721507f416f1c39901addafb","16F413862EFDA3ABA631D8A7AE2BFFF6D84ACD9F454A7ADAA518C7A8A6F375A5","05732E84DE58A3CC142535431B3AA04EFBE034CC96E837F93C360A6387D8FAAD","6FBB771CD168B5D076525805D010AE0CD73B39AB1F4E6693148FE18B8F73090B","912018AB3C6B16B39EE84F17745FF0C80A33CEE241013EC35D0281E40C0658D9","CAF6739D50366E18C855E2206A86F64DA90EC1CDF3E309AEB18AC22C6E28DC65","2963a90eb9e499258a67d8231a3124021b42e6c70dacd3aab36746e51e3ce37e","2AA1BBBE47F04627A8EA4E8718AD21F0D50ADF6A32BA4E6133EE46CE2CD13780","5A73FDD0C4D0DEEA80FA13121503B477597761D82CF2CFB0E9D8DF469357E3F8","C92C158D7C37FEA795114FA6491FE5F145AD2F8C08776B18AE79DB811E8E36A3")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("586F30907C3849C363145BFDCDABE3E2E4688CBD5688FF968E984B201B474730","8ce219552e235dcaf1c694be122d6339ed4ff8df70bf358cd165e6eb487ccfc5","c2904dc8bbb569536c742fca0c51a766e836d0da8fac1c1abd99744e9b50164f","dda53eee2c5cb0abdbf5242f5e82f4de83898b6a9dd8aa935c2be29bafc9a469","90fb0cd574155fd8667d20f97ac464eca67bdb6a8ee64184159362d45d79b6a4","f226086b5959eb96bd30dec0ffcbf0f09186cd11721507f416f1c39901addafb","16F413862EFDA3ABA631D8A7AE2BFFF6D84ACD9F454A7ADAA518C7A8A6F375A5","05732E84DE58A3CC142535431B3AA04EFBE034CC96E837F93C360A6387D8FAAD","6FBB771CD168B5D076525805D010AE0CD73B39AB1F4E6693148FE18B8F73090B","912018AB3C6B16B39EE84F17745FF0C80A33CEE241013EC35D0281E40C0658D9","CAF6739D50366E18C855E2206A86F64DA90EC1CDF3E309AEB18AC22C6E28DC65","2963a90eb9e499258a67d8231a3124021b42e6c70dacd3aab36746e51e3ce37e","2AA1BBBE47F04627A8EA4E8718AD21F0D50ADF6A32BA4E6133EE46CE2CD13780","5A73FDD0C4D0DEEA80FA13121503B477597761D82CF2CFB0E9D8DF469357E3F8","C92C158D7C37FEA795114FA6491FE5F145AD2F8C08776B18AE79DB811E8E36A3")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("586F30907C3849C363145BFDCDABE3E2E4688CBD5688FF968E984B201B474730","8ce219552e235dcaf1c694be122d6339ed4ff8df70bf358cd165e6eb487ccfc5","c2904dc8bbb569536c742fca0c51a766e836d0da8fac1c1abd99744e9b50164f","dda53eee2c5cb0abdbf5242f5e82f4de83898b6a9dd8aa935c2be29bafc9a469","90fb0cd574155fd8667d20f97ac464eca67bdb6a8ee64184159362d45d79b6a4","f226086b5959eb96bd30dec0ffcbf0f09186cd11721507f416f1c39901addafb","16F413862EFDA3ABA631D8A7AE2BFFF6D84ACD9F454A7ADAA518C7A8A6F375A5","05732E84DE58A3CC142535431B3AA04EFBE034CC96E837F93C360A6387D8FAAD","6FBB771CD168B5D076525805D010AE0CD73B39AB1F4E6693148FE18B8F73090B","912018AB3C6B16B39EE84F17745FF0C80A33CEE241013EC35D0281E40C0658D9","CAF6739D50366E18C855E2206A86F64DA90EC1CDF3E309AEB18AC22C6E28DC65","2963a90eb9e499258a67d8231a3124021b42e6c70dacd3aab36746e51e3ce37e","2AA1BBBE47F04627A8EA4E8718AD21F0D50ADF6A32BA4E6133EE46CE2CD13780","5A73FDD0C4D0DEEA80FA13121503B477597761D82CF2CFB0E9D8DF469357E3F8","C92C158D7C37FEA795114FA6491FE5F145AD2F8C08776B18AE79DB811E8E36A3")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("586F30907C3849C363145BFDCDABE3E2E4688CBD5688FF968E984B201B474730","8ce219552e235dcaf1c694be122d6339ed4ff8df70bf358cd165e6eb487ccfc5","c2904dc8bbb569536c742fca0c51a766e836d0da8fac1c1abd99744e9b50164f","dda53eee2c5cb0abdbf5242f5e82f4de83898b6a9dd8aa935c2be29bafc9a469","90fb0cd574155fd8667d20f97ac464eca67bdb6a8ee64184159362d45d79b6a4","f226086b5959eb96bd30dec0ffcbf0f09186cd11721507f416f1c39901addafb","16F413862EFDA3ABA631D8A7AE2BFFF6D84ACD9F454A7ADAA518C7A8A6F375A5","05732E84DE58A3CC142535431B3AA04EFBE034CC96E837F93C360A6387D8FAAD","6FBB771CD168B5D076525805D010AE0CD73B39AB1F4E6693148FE18B8F73090B","912018AB3C6B16B39EE84F17745FF0C80A33CEE241013EC35D0281E40C0658D9","CAF6739D50366E18C855E2206A86F64DA90EC1CDF3E309AEB18AC22C6E28DC65","2963a90eb9e499258a67d8231a3124021b42e6c70dacd3aab36746e51e3ce37e","2AA1BBBE47F04627A8EA4E8718AD21F0D50ADF6A32BA4E6133EE46CE2CD13780","5A73FDD0C4D0DEEA80FA13121503B477597761D82CF2CFB0E9D8DF469357E3F8","C92C158D7C37FEA795114FA6491FE5F145AD2F8C08776B18AE79DB811E8E36A3")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("586F30907C3849C363145BFDCDABE3E2E4688CBD5688FF968E984B201B474730","8ce219552e235dcaf1c694be122d6339ed4ff8df70bf358cd165e6eb487ccfc5","c2904dc8bbb569536c742fca0c51a766e836d0da8fac1c1abd99744e9b50164f","dda53eee2c5cb0abdbf5242f5e82f4de83898b6a9dd8aa935c2be29bafc9a469","90fb0cd574155fd8667d20f97ac464eca67bdb6a8ee64184159362d45d79b6a4","f226086b5959eb96bd30dec0ffcbf0f09186cd11721507f416f1c39901addafb","16F413862EFDA3ABA631D8A7AE2BFFF6D84ACD9F454A7ADAA518C7A8A6F375A5","05732E84DE58A3CC142535431B3AA04EFBE034CC96E837F93C360A6387D8FAAD","6FBB771CD168B5D076525805D010AE0CD73B39AB1F4E6693148FE18B8F73090B","912018AB3C6B16B39EE84F17745FF0C80A33CEE241013EC35D0281E40C0658D9","CAF6739D50366E18C855E2206A86F64DA90EC1CDF3E309AEB18AC22C6E28DC65","2963a90eb9e499258a67d8231a3124021b42e6c70dacd3aab36746e51e3ce37e","2AA1BBBE47F04627A8EA4E8718AD21F0D50ADF6A32BA4E6133EE46CE2CD13780","5A73FDD0C4D0DEEA80FA13121503B477597761D82CF2CFB0E9D8DF469357E3F8","C92C158D7C37FEA795114FA6491FE5F145AD2F8C08776B18AE79DB811E8E36A3")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("586F30907C3849C363145BFDCDABE3E2E4688CBD5688FF968E984B201B474730","8ce219552e235dcaf1c694be122d6339ed4ff8df70bf358cd165e6eb487ccfc5","c2904dc8bbb569536c742fca0c51a766e836d0da8fac1c1abd99744e9b50164f","dda53eee2c5cb0abdbf5242f5e82f4de83898b6a9dd8aa935c2be29bafc9a469","90fb0cd574155fd8667d20f97ac464eca67bdb6a8ee64184159362d45d79b6a4","f226086b5959eb96bd30dec0ffcbf0f09186cd11721507f416f1c39901addafb","16F413862EFDA3ABA631D8A7AE2BFFF6D84ACD9F454A7ADAA518C7A8A6F375A5","05732E84DE58A3CC142535431B3AA04EFBE034CC96E837F93C360A6387D8FAAD","6FBB771CD168B5D076525805D010AE0CD73B39AB1F4E6693148FE18B8F73090B","912018AB3C6B16B39EE84F17745FF0C80A33CEE241013EC35D0281E40C0658D9","CAF6739D50366E18C855E2206A86F64DA90EC1CDF3E309AEB18AC22C6E28DC65","2963a90eb9e499258a67d8231a3124021b42e6c70dacd3aab36746e51e3ce37e","2AA1BBBE47F04627A8EA4E8718AD21F0D50ADF6A32BA4E6133EE46CE2CD13780","5A73FDD0C4D0DEEA80FA13121503B477597761D82CF2CFB0E9D8DF469357E3F8","C92C158D7C37FEA795114FA6491FE5F145AD2F8C08776B18AE79DB811E8E36A3")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("586F30907C3849C363145BFDCDABE3E2E4688CBD5688FF968E984B201B474730","8ce219552e235dcaf1c694be122d6339ed4ff8df70bf358cd165e6eb487ccfc5","c2904dc8bbb569536c742fca0c51a766e836d0da8fac1c1abd99744e9b50164f","dda53eee2c5cb0abdbf5242f5e82f4de83898b6a9dd8aa935c2be29bafc9a469","90fb0cd574155fd8667d20f97ac464eca67bdb6a8ee64184159362d45d79b6a4","f226086b5959eb96bd30dec0ffcbf0f09186cd11721507f416f1c39901addafb","16F413862EFDA3ABA631D8A7AE2BFFF6D84ACD9F454A7ADAA518C7A8A6F375A5","05732E84DE58A3CC142535431B3AA04EFBE034CC96E837F93C360A6387D8FAAD","6FBB771CD168B5D076525805D010AE0CD73B39AB1F4E6693148FE18B8F73090B","912018AB3C6B16B39EE84F17745FF0C80A33CEE241013EC35D0281E40C0658D9","CAF6739D50366E18C855E2206A86F64DA90EC1CDF3E309AEB18AC22C6E28DC65","2963a90eb9e499258a67d8231a3124021b42e6c70dacd3aab36746e51e3ce37e","2AA1BBBE47F04627A8EA4E8718AD21F0D50ADF6A32BA4E6133EE46CE2CD13780","5A73FDD0C4D0DEEA80FA13121503B477597761D82CF2CFB0E9D8DF469357E3F8","C92C158D7C37FEA795114FA6491FE5F145AD2F8C08776B18AE79DB811E8E36A3")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("586F30907C3849C363145BFDCDABE3E2E4688CBD5688FF968E984B201B474730","8ce219552e235dcaf1c694be122d6339ed4ff8df70bf358cd165e6eb487ccfc5","c2904dc8bbb569536c742fca0c51a766e836d0da8fac1c1abd99744e9b50164f","dda53eee2c5cb0abdbf5242f5e82f4de83898b6a9dd8aa935c2be29bafc9a469","90fb0cd574155fd8667d20f97ac464eca67bdb6a8ee64184159362d45d79b6a4","f226086b5959eb96bd30dec0ffcbf0f09186cd11721507f416f1c39901addafb","16F413862EFDA3ABA631D8A7AE2BFFF6D84ACD9F454A7ADAA518C7A8A6F375A5","05732E84DE58A3CC142535431B3AA04EFBE034CC96E837F93C360A6387D8FAAD","6FBB771CD168B5D076525805D010AE0CD73B39AB1F4E6693148FE18B8F73090B","912018AB3C6B16B39EE84F17745FF0C80A33CEE241013EC35D0281E40C0658D9","CAF6739D50366E18C855E2206A86F64DA90EC1CDF3E309AEB18AC22C6E28DC65","2963a90eb9e499258a67d8231a3124021b42e6c70dacd3aab36746e51e3ce37e","2AA1BBBE47F04627A8EA4E8718AD21F0D50ADF6A32BA4E6133EE46CE2CD13780","5A73FDD0C4D0DEEA80FA13121503B477597761D82CF2CFB0E9D8DF469357E3F8","C92C158D7C37FEA795114FA6491FE5F145AD2F8C08776B18AE79DB811E8E36A3")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("586F30907C3849C363145BFDCDABE3E2E4688CBD5688FF968E984B201B474730","8ce219552e235dcaf1c694be122d6339ed4ff8df70bf358cd165e6eb487ccfc5","c2904dc8bbb569536c742fca0c51a766e836d0da8fac1c1abd99744e9b50164f","dda53eee2c5cb0abdbf5242f5e82f4de83898b6a9dd8aa935c2be29bafc9a469","90fb0cd574155fd8667d20f97ac464eca67bdb6a8ee64184159362d45d79b6a4","f226086b5959eb96bd30dec0ffcbf0f09186cd11721507f416f1c39901addafb","16F413862EFDA3ABA631D8A7AE2BFFF6D84ACD9F454A7ADAA518C7A8A6F375A5","05732E84DE58A3CC142535431B3AA04EFBE034CC96E837F93C360A6387D8FAAD","6FBB771CD168B5D076525805D010AE0CD73B39AB1F4E6693148FE18B8F73090B","912018AB3C6B16B39EE84F17745FF0C80A33CEE241013EC35D0281E40C0658D9","CAF6739D50366E18C855E2206A86F64DA90EC1CDF3E309AEB18AC22C6E28DC65","2963a90eb9e499258a67d8231a3124021b42e6c70dacd3aab36746e51e3ce37e","2AA1BBBE47F04627A8EA4E8718AD21F0D50ADF6A32BA4E6133EE46CE2CD13780","5A73FDD0C4D0DEEA80FA13121503B477597761D82CF2CFB0E9D8DF469357E3F8","C92C158D7C37FEA795114FA6491FE5F145AD2F8C08776B18AE79DB811E8E36A3")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("586F30907C3849C363145BFDCDABE3E2E4688CBD5688FF968E984B201B474730","8ce219552e235dcaf1c694be122d6339ed4ff8df70bf358cd165e6eb487ccfc5","c2904dc8bbb569536c742fca0c51a766e836d0da8fac1c1abd99744e9b50164f","dda53eee2c5cb0abdbf5242f5e82f4de83898b6a9dd8aa935c2be29bafc9a469","90fb0cd574155fd8667d20f97ac464eca67bdb6a8ee64184159362d45d79b6a4","f226086b5959eb96bd30dec0ffcbf0f09186cd11721507f416f1c39901addafb","16F413862EFDA3ABA631D8A7AE2BFFF6D84ACD9F454A7ADAA518C7A8A6F375A5","05732E84DE58A3CC142535431B3AA04EFBE034CC96E837F93C360A6387D8FAAD","6FBB771CD168B5D076525805D010AE0CD73B39AB1F4E6693148FE18B8F73090B","912018AB3C6B16B39EE84F17745FF0C80A33CEE241013EC35D0281E40C0658D9","CAF6739D50366E18C855E2206A86F64DA90EC1CDF3E309AEB18AC22C6E28DC65","2963a90eb9e499258a67d8231a3124021b42e6c70dacd3aab36746e51e3ce37e","2AA1BBBE47F04627A8EA4E8718AD21F0D50ADF6A32BA4E6133EE46CE2CD13780","5A73FDD0C4D0DEEA80FA13121503B477597761D82CF2CFB0E9D8DF469357E3F8","C92C158D7C37FEA795114FA6491FE5F145AD2F8C08776B18AE79DB811E8E36A3")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("586F30907C3849C363145BFDCDABE3E2E4688CBD5688FF968E984B201B474730","8ce219552e235dcaf1c694be122d6339ed4ff8df70bf358cd165e6eb487ccfc5","c2904dc8bbb569536c742fca0c51a766e836d0da8fac1c1abd99744e9b50164f","dda53eee2c5cb0abdbf5242f5e82f4de83898b6a9dd8aa935c2be29bafc9a469","90fb0cd574155fd8667d20f97ac464eca67bdb6a8ee64184159362d45d79b6a4","f226086b5959eb96bd30dec0ffcbf0f09186cd11721507f416f1c39901addafb","16F413862EFDA3ABA631D8A7AE2BFFF6D84ACD9F454A7ADAA518C7A8A6F375A5","05732E84DE58A3CC142535431B3AA04EFBE034CC96E837F93C360A6387D8FAAD","6FBB771CD168B5D076525805D010AE0CD73B39AB1F4E6693148FE18B8F73090B","912018AB3C6B16B39EE84F17745FF0C80A33CEE241013EC35D0281E40C0658D9","CAF6739D50366E18C855E2206A86F64DA90EC1CDF3E309AEB18AC22C6E28DC65","2963a90eb9e499258a67d8231a3124021b42e6c70dacd3aab36746e51e3ce37e","2AA1BBBE47F04627A8EA4E8718AD21F0D50ADF6A32BA4E6133EE46CE2CD13780","5A73FDD0C4D0DEEA80FA13121503B477597761D82CF2CFB0E9D8DF469357E3F8","C92C158D7C37FEA795114FA6491FE5F145AD2F8C08776B18AE79DB811E8E36A3")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("586F30907C3849C363145BFDCDABE3E2E4688CBD5688FF968E984B201B474730","8ce219552e235dcaf1c694be122d6339ed4ff8df70bf358cd165e6eb487ccfc5","c2904dc8bbb569536c742fca0c51a766e836d0da8fac1c1abd99744e9b50164f","dda53eee2c5cb0abdbf5242f5e82f4de83898b6a9dd8aa935c2be29bafc9a469","90fb0cd574155fd8667d20f97ac464eca67bdb6a8ee64184159362d45d79b6a4","f226086b5959eb96bd30dec0ffcbf0f09186cd11721507f416f1c39901addafb","16F413862EFDA3ABA631D8A7AE2BFFF6D84ACD9F454A7ADAA518C7A8A6F375A5","05732E84DE58A3CC142535431B3AA04EFBE034CC96E837F93C360A6387D8FAAD","6FBB771CD168B5D076525805D010AE0CD73B39AB1F4E6693148FE18B8F73090B","912018AB3C6B16B39EE84F17745FF0C80A33CEE241013EC35D0281E40C0658D9","CAF6739D50366E18C855E2206A86F64DA90EC1CDF3E309AEB18AC22C6E28DC65","2963a90eb9e499258a67d8231a3124021b42e6c70dacd3aab36746e51e3ce37e","2AA1BBBE47F04627A8EA4E8718AD21F0D50ADF6A32BA4E6133EE46CE2CD13780","5A73FDD0C4D0DEEA80FA13121503B477597761D82CF2CFB0E9D8DF469357E3F8","C92C158D7C37FEA795114FA6491FE5F145AD2F8C08776B18AE79DB811E8E36A3")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("586F30907C3849C363145BFDCDABE3E2E4688CBD5688FF968E984B201B474730","8ce219552e235dcaf1c694be122d6339ed4ff8df70bf358cd165e6eb487ccfc5","c2904dc8bbb569536c742fca0c51a766e836d0da8fac1c1abd99744e9b50164f","dda53eee2c5cb0abdbf5242f5e82f4de83898b6a9dd8aa935c2be29bafc9a469","90fb0cd574155fd8667d20f97ac464eca67bdb6a8ee64184159362d45d79b6a4","f226086b5959eb96bd30dec0ffcbf0f09186cd11721507f416f1c39901addafb","16F413862EFDA3ABA631D8A7AE2BFFF6D84ACD9F454A7ADAA518C7A8A6F375A5","05732E84DE58A3CC142535431B3AA04EFBE034CC96E837F93C360A6387D8FAAD","6FBB771CD168B5D076525805D010AE0CD73B39AB1F4E6693148FE18B8F73090B","912018AB3C6B16B39EE84F17745FF0C80A33CEE241013EC35D0281E40C0658D9","CAF6739D50366E18C855E2206A86F64DA90EC1CDF3E309AEB18AC22C6E28DC65","2963a90eb9e499258a67d8231a3124021b42e6c70dacd3aab36746e51e3ce37e","2AA1BBBE47F04627A8EA4E8718AD21F0D50ADF6A32BA4E6133EE46CE2CD13780","5A73FDD0C4D0DEEA80FA13121503B477597761D82CF2CFB0E9D8DF469357E3F8","C92C158D7C37FEA795114FA6491FE5F145AD2F8C08776B18AE79DB811E8E36A3")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("586F30907C3849C363145BFDCDABE3E2E4688CBD5688FF968E984B201B474730","8ce219552e235dcaf1c694be122d6339ed4ff8df70bf358cd165e6eb487ccfc5","c2904dc8bbb569536c742fca0c51a766e836d0da8fac1c1abd99744e9b50164f","dda53eee2c5cb0abdbf5242f5e82f4de83898b6a9dd8aa935c2be29bafc9a469","90fb0cd574155fd8667d20f97ac464eca67bdb6a8ee64184159362d45d79b6a4","f226086b5959eb96bd30dec0ffcbf0f09186cd11721507f416f1c39901addafb","16F413862EFDA3ABA631D8A7AE2BFFF6D84ACD9F454A7ADAA518C7A8A6F375A5","05732E84DE58A3CC142535431B3AA04EFBE034CC96E837F93C360A6387D8FAAD","6FBB771CD168B5D076525805D010AE0CD73B39AB1F4E6693148FE18B8F73090B","912018AB3C6B16B39EE84F17745FF0C80A33CEE241013EC35D0281E40C0658D9","CAF6739D50366E18C855E2206A86F64DA90EC1CDF3E309AEB18AC22C6E28DC65","2963a90eb9e499258a67d8231a3124021b42e6c70dacd3aab36746e51e3ce37e","2AA1BBBE47F04627A8EA4E8718AD21F0D50ADF6A32BA4E6133EE46CE2CD13780","5A73FDD0C4D0DEEA80FA13121503B477597761D82CF2CFB0E9D8DF469357E3F8","C92C158D7C37FEA795114FA6491FE5F145AD2F8C08776B18AE79DB811E8E36A3")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("586F30907C3849C363145BFDCDABE3E2E4688CBD5688FF968E984B201B474730","8ce219552e235dcaf1c694be122d6339ed4ff8df70bf358cd165e6eb487ccfc5","c2904dc8bbb569536c742fca0c51a766e836d0da8fac1c1abd99744e9b50164f","dda53eee2c5cb0abdbf5242f5e82f4de83898b6a9dd8aa935c2be29bafc9a469","90fb0cd574155fd8667d20f97ac464eca67bdb6a8ee64184159362d45d79b6a4","f226086b5959eb96bd30dec0ffcbf0f09186cd11721507f416f1c39901addafb","16F413862EFDA3ABA631D8A7AE2BFFF6D84ACD9F454A7ADAA518C7A8A6F375A5","05732E84DE58A3CC142535431B3AA04EFBE034CC96E837F93C360A6387D8FAAD","6FBB771CD168B5D076525805D010AE0CD73B39AB1F4E6693148FE18B8F73090B","912018AB3C6B16B39EE84F17745FF0C80A33CEE241013EC35D0281E40C0658D9","CAF6739D50366E18C855E2206A86F64DA90EC1CDF3E309AEB18AC22C6E28DC65","2963a90eb9e499258a67d8231a3124021b42e6c70dacd3aab36746e51e3ce37e","2AA1BBBE47F04627A8EA4E8718AD21F0D50ADF6A32BA4E6133EE46CE2CD13780","5A73FDD0C4D0DEEA80FA13121503B477597761D82CF2CFB0E9D8DF469357E3F8","C92C158D7C37FEA795114FA6491FE5F145AD2F8C08776B18AE79DB811E8E36A3")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("586F30907C3849C363145BFDCDABE3E2E4688CBD5688FF968E984B201B474730","8ce219552e235dcaf1c694be122d6339ed4ff8df70bf358cd165e6eb487ccfc5","c2904dc8bbb569536c742fca0c51a766e836d0da8fac1c1abd99744e9b50164f","dda53eee2c5cb0abdbf5242f5e82f4de83898b6a9dd8aa935c2be29bafc9a469","90fb0cd574155fd8667d20f97ac464eca67bdb6a8ee64184159362d45d79b6a4","f226086b5959eb96bd30dec0ffcbf0f09186cd11721507f416f1c39901addafb","16F413862EFDA3ABA631D8A7AE2BFFF6D84ACD9F454A7ADAA518C7A8A6F375A5","05732E84DE58A3CC142535431B3AA04EFBE034CC96E837F93C360A6387D8FAAD","6FBB771CD168B5D076525805D010AE0CD73B39AB1F4E6693148FE18B8F73090B","912018AB3C6B16B39EE84F17745FF0C80A33CEE241013EC35D0281E40C0658D9","CAF6739D50366E18C855E2206A86F64DA90EC1CDF3E309AEB18AC22C6E28DC65","2963a90eb9e499258a67d8231a3124021b42e6c70dacd3aab36746e51e3ce37e","2AA1BBBE47F04627A8EA4E8718AD21F0D50ADF6A32BA4E6133EE46CE2CD13780","5A73FDD0C4D0DEEA80FA13121503B477597761D82CF2CFB0E9D8DF469357E3F8","C92C158D7C37FEA795114FA6491FE5F145AD2F8C08776B18AE79DB811E8E36A3")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("586F30907C3849C363145BFDCDABE3E2E4688CBD5688FF968E984B201B474730","8ce219552e235dcaf1c694be122d6339ed4ff8df70bf358cd165e6eb487ccfc5","c2904dc8bbb569536c742fca0c51a766e836d0da8fac1c1abd99744e9b50164f","dda53eee2c5cb0abdbf5242f5e82f4de83898b6a9dd8aa935c2be29bafc9a469","90fb0cd574155fd8667d20f97ac464eca67bdb6a8ee64184159362d45d79b6a4","f226086b5959eb96bd30dec0ffcbf0f09186cd11721507f416f1c39901addafb","16F413862EFDA3ABA631D8A7AE2BFFF6D84ACD9F454A7ADAA518C7A8A6F375A5","05732E84DE58A3CC142535431B3AA04EFBE034CC96E837F93C360A6387D8FAAD","6FBB771CD168B5D076525805D010AE0CD73B39AB1F4E6693148FE18B8F73090B","912018AB3C6B16B39EE84F17745FF0C80A33CEE241013EC35D0281E40C0658D9","CAF6739D50366E18C855E2206A86F64DA90EC1CDF3E309AEB18AC22C6E28DC65","2963a90eb9e499258a67d8231a3124021b42e6c70dacd3aab36746e51e3ce37e","2AA1BBBE47F04627A8EA4E8718AD21F0D50ADF6A32BA4E6133EE46CE2CD13780","5A73FDD0C4D0DEEA80FA13121503B477597761D82CF2CFB0E9D8DF469357E3F8","C92C158D7C37FEA795114FA6491FE5F145AD2F8C08776B18AE79DB811E8E36A3")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("586F30907C3849C363145BFDCDABE3E2E4688CBD5688FF968E984B201B474730","8ce219552e235dcaf1c694be122d6339ed4ff8df70bf358cd165e6eb487ccfc5","c2904dc8bbb569536c742fca0c51a766e836d0da8fac1c1abd99744e9b50164f","dda53eee2c5cb0abdbf5242f5e82f4de83898b6a9dd8aa935c2be29bafc9a469","90fb0cd574155fd8667d20f97ac464eca67bdb6a8ee64184159362d45d79b6a4","f226086b5959eb96bd30dec0ffcbf0f09186cd11721507f416f1c39901addafb","16F413862EFDA3ABA631D8A7AE2BFFF6D84ACD9F454A7ADAA518C7A8A6F375A5","05732E84DE58A3CC142535431B3AA04EFBE034CC96E837F93C360A6387D8FAAD","6FBB771CD168B5D076525805D010AE0CD73B39AB1F4E6693148FE18B8F73090B","912018AB3C6B16B39EE84F17745FF0C80A33CEE241013EC35D0281E40C0658D9","CAF6739D50366E18C855E2206A86F64DA90EC1CDF3E309AEB18AC22C6E28DC65","2963a90eb9e499258a67d8231a3124021b42e6c70dacd3aab36746e51e3ce37e","2AA1BBBE47F04627A8EA4E8718AD21F0D50ADF6A32BA4E6133EE46CE2CD13780","5A73FDD0C4D0DEEA80FA13121503B477597761D82CF2CFB0E9D8DF469357E3F8","C92C158D7C37FEA795114FA6491FE5F145AD2F8C08776B18AE79DB811E8E36A3")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("586F30907C3849C363145BFDCDABE3E2E4688CBD5688FF968E984B201B474730","8ce219552e235dcaf1c694be122d6339ed4ff8df70bf358cd165e6eb487ccfc5","c2904dc8bbb569536c742fca0c51a766e836d0da8fac1c1abd99744e9b50164f","dda53eee2c5cb0abdbf5242f5e82f4de83898b6a9dd8aa935c2be29bafc9a469","90fb0cd574155fd8667d20f97ac464eca67bdb6a8ee64184159362d45d79b6a4","f226086b5959eb96bd30dec0ffcbf0f09186cd11721507f416f1c39901addafb","16F413862EFDA3ABA631D8A7AE2BFFF6D84ACD9F454A7ADAA518C7A8A6F375A5","05732E84DE58A3CC142535431B3AA04EFBE034CC96E837F93C360A6387D8FAAD","6FBB771CD168B5D076525805D010AE0CD73B39AB1F4E6693148FE18B8F73090B","912018AB3C6B16B39EE84F17745FF0C80A33CEE241013EC35D0281E40C0658D9","CAF6739D50366E18C855E2206A86F64DA90EC1CDF3E309AEB18AC22C6E28DC65","2963a90eb9e499258a67d8231a3124021b42e6c70dacd3aab36746e51e3ce37e","2AA1BBBE47F04627A8EA4E8718AD21F0D50ADF6A32BA4E6133EE46CE2CD13780","5A73FDD0C4D0DEEA80FA13121503B477597761D82CF2CFB0E9D8DF469357E3F8","C92C158D7C37FEA795114FA6491FE5F145AD2F8C08776B18AE79DB811E8E36A3")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("586F30907C3849C363145BFDCDABE3E2E4688CBD5688FF968E984B201B474730","8ce219552e235dcaf1c694be122d6339ed4ff8df70bf358cd165e6eb487ccfc5","c2904dc8bbb569536c742fca0c51a766e836d0da8fac1c1abd99744e9b50164f","dda53eee2c5cb0abdbf5242f5e82f4de83898b6a9dd8aa935c2be29bafc9a469","90fb0cd574155fd8667d20f97ac464eca67bdb6a8ee64184159362d45d79b6a4","f226086b5959eb96bd30dec0ffcbf0f09186cd11721507f416f1c39901addafb","16F413862EFDA3ABA631D8A7AE2BFFF6D84ACD9F454A7ADAA518C7A8A6F375A5","05732E84DE58A3CC142535431B3AA04EFBE034CC96E837F93C360A6387D8FAAD","6FBB771CD168B5D076525805D010AE0CD73B39AB1F4E6693148FE18B8F73090B","912018AB3C6B16B39EE84F17745FF0C80A33CEE241013EC35D0281E40C0658D9","CAF6739D50366E18C855E2206A86F64DA90EC1CDF3E309AEB18AC22C6E28DC65","2963a90eb9e499258a67d8231a3124021b42e6c70dacd3aab36746e51e3ce37e","2AA1BBBE47F04627A8EA4E8718AD21F0D50ADF6A32BA4E6133EE46CE2CD13780","5A73FDD0C4D0DEEA80FA13121503B477597761D82CF2CFB0E9D8DF469357E3F8","C92C158D7C37FEA795114FA6491FE5F145AD2F8C08776B18AE79DB811E8E36A3")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("586F30907C3849C363145BFDCDABE3E2E4688CBD5688FF968E984B201B474730","8ce219552e235dcaf1c694be122d6339ed4ff8df70bf358cd165e6eb487ccfc5","c2904dc8bbb569536c742fca0c51a766e836d0da8fac1c1abd99744e9b50164f","dda53eee2c5cb0abdbf5242f5e82f4de83898b6a9dd8aa935c2be29bafc9a469","90fb0cd574155fd8667d20f97ac464eca67bdb6a8ee64184159362d45d79b6a4","f226086b5959eb96bd30dec0ffcbf0f09186cd11721507f416f1c39901addafb","16F413862EFDA3ABA631D8A7AE2BFFF6D84ACD9F454A7ADAA518C7A8A6F375A5","05732E84DE58A3CC142535431B3AA04EFBE034CC96E837F93C360A6387D8FAAD","6FBB771CD168B5D076525805D010AE0CD73B39AB1F4E6693148FE18B8F73090B","912018AB3C6B16B39EE84F17745FF0C80A33CEE241013EC35D0281E40C0658D9","CAF6739D50366E18C855E2206A86F64DA90EC1CDF3E309AEB18AC22C6E28DC65","2963a90eb9e499258a67d8231a3124021b42e6c70dacd3aab36746e51e3ce37e","2AA1BBBE47F04627A8EA4E8718AD21F0D50ADF6A32BA4E6133EE46CE2CD13780","5A73FDD0C4D0DEEA80FA13121503B477597761D82CF2CFB0E9D8DF469357E3F8","C92C158D7C37FEA795114FA6491FE5F145AD2F8C08776B18AE79DB811E8E36A3")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("586F30907C3849C363145BFDCDABE3E2E4688CBD5688FF968E984B201B474730","8ce219552e235dcaf1c694be122d6339ed4ff8df70bf358cd165e6eb487ccfc5","c2904dc8bbb569536c742fca0c51a766e836d0da8fac1c1abd99744e9b50164f","dda53eee2c5cb0abdbf5242f5e82f4de83898b6a9dd8aa935c2be29bafc9a469","90fb0cd574155fd8667d20f97ac464eca67bdb6a8ee64184159362d45d79b6a4","f226086b5959eb96bd30dec0ffcbf0f09186cd11721507f416f1c39901addafb","16F413862EFDA3ABA631D8A7AE2BFFF6D84ACD9F454A7ADAA518C7A8A6F375A5","05732E84DE58A3CC142535431B3AA04EFBE034CC96E837F93C360A6387D8FAAD","6FBB771CD168B5D076525805D010AE0CD73B39AB1F4E6693148FE18B8F73090B","912018AB3C6B16B39EE84F17745FF0C80A33CEE241013EC35D0281E40C0658D9","CAF6739D50366E18C855E2206A86F64DA90EC1CDF3E309AEB18AC22C6E28DC65","2963a90eb9e499258a67d8231a3124021b42e6c70dacd3aab36746e51e3ce37e","2AA1BBBE47F04627A8EA4E8718AD21F0D50ADF6A32BA4E6133EE46CE2CD13780","5A73FDD0C4D0DEEA80FA13121503B477597761D82CF2CFB0E9D8DF469357E3F8","C92C158D7C37FEA795114FA6491FE5F145AD2F8C08776B18AE79DB811E8E36A3")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("586F30907C3849C363145BFDCDABE3E2E4688CBD5688FF968E984B201B474730","8ce219552e235dcaf1c694be122d6339ed4ff8df70bf358cd165e6eb487ccfc5","c2904dc8bbb569536c742fca0c51a766e836d0da8fac1c1abd99744e9b50164f","dda53eee2c5cb0abdbf5242f5e82f4de83898b6a9dd8aa935c2be29bafc9a469","90fb0cd574155fd8667d20f97ac464eca67bdb6a8ee64184159362d45d79b6a4","f226086b5959eb96bd30dec0ffcbf0f09186cd11721507f416f1c39901addafb","16F413862EFDA3ABA631D8A7AE2BFFF6D84ACD9F454A7ADAA518C7A8A6F375A5","05732E84DE58A3CC142535431B3AA04EFBE034CC96E837F93C360A6387D8FAAD","6FBB771CD168B5D076525805D010AE0CD73B39AB1F4E6693148FE18B8F73090B","912018AB3C6B16B39EE84F17745FF0C80A33CEE241013EC35D0281E40C0658D9","CAF6739D50366E18C855E2206A86F64DA90EC1CDF3E309AEB18AC22C6E28DC65","2963a90eb9e499258a67d8231a3124021b42e6c70dacd3aab36746e51e3ce37e","2AA1BBBE47F04627A8EA4E8718AD21F0D50ADF6A32BA4E6133EE46CE2CD13780","5A73FDD0C4D0DEEA80FA13121503B477597761D82CF2CFB0E9D8DF469357E3F8","C92C158D7C37FEA795114FA6491FE5F145AD2F8C08776B18AE79DB811E8E36A3")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("http://104.155.149.103/2-443.ps1","http://104.155.149.103/8080.ps1","http://104.155.149.103/mi64.tmp","http://104.155.149.103/mi.tmp","http://104.155.149.103/mm.rar","http://104.155.149.103/pd64.tmp","http://104.155.149.103/rar.tmp","http://104.155.149.103/spr.tmp","http://104.155.149.103/t.tmp","http://104.155.149.103/update.tmp","http://109.248.150.13:8080/1","http://146.4.21.94/tmp/data_preview/virtual.php","http://185.29.8.162:443/1.tmp","http://40.121.90.194/11.jpg","http://40.121.90.194/300dr.cert","http://40.121.90.194/b.cert","http://40.121.90.194/qq.cert","http://40.121.90.194/ra.cert","http://40.121.90.194/Rar.jpg","http://40.121.90.194/tt.rar","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/huntertroy.exe","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/svhostw.exe","http://84.38.133.145/board.html","http://84.38.133.145/header.xml","http://www.ajoa.org/home/manager/template/calendar.php","http://www.ajoa.org/home/rar.tmp","http://www.ajoa.org/home/tmp.ps1","http://www.ajoa.org/home/ztt.tmp","http://www.orvi00.com/ez/admin/shop/powerline.tmp","https://tecnojournals.com/review","https://semiconductboard.com/xml","http://cyancow.com/find","http://155.94.210.11/news/page.php","http://192.186.183.133/bbs/board.php","http://213.32.46.0/board.php","http://54.68.42.4/mainboard.php","http://84.38.133.145/apollom/jeus.php","http://mudeungsan.or.kr/gbbs/bbs/template/g_botton.php","http://www.easyview.kr/board/Kheader.php","http://www.easyview.kr/board/mb_admin.php","http://213.180.180.154/editor/session/aaa000/support.php")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://104.155.149.103/2-443.ps1","http://104.155.149.103/8080.ps1","http://104.155.149.103/mi64.tmp","http://104.155.149.103/mi.tmp","http://104.155.149.103/mm.rar","http://104.155.149.103/pd64.tmp","http://104.155.149.103/rar.tmp","http://104.155.149.103/spr.tmp","http://104.155.149.103/t.tmp","http://104.155.149.103/update.tmp","http://109.248.150.13:8080/1","http://146.4.21.94/tmp/data_preview/virtual.php","http://185.29.8.162:443/1.tmp","http://40.121.90.194/11.jpg","http://40.121.90.194/300dr.cert","http://40.121.90.194/b.cert","http://40.121.90.194/qq.cert","http://40.121.90.194/ra.cert","http://40.121.90.194/Rar.jpg","http://40.121.90.194/tt.rar","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/huntertroy.exe","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/svhostw.exe","http://84.38.133.145/board.html","http://84.38.133.145/header.xml","http://www.ajoa.org/home/manager/template/calendar.php","http://www.ajoa.org/home/rar.tmp","http://www.ajoa.org/home/tmp.ps1","http://www.ajoa.org/home/ztt.tmp","http://www.orvi00.com/ez/admin/shop/powerline.tmp","https://tecnojournals.com/review","https://semiconductboard.com/xml","http://cyancow.com/find","http://155.94.210.11/news/page.php","http://192.186.183.133/bbs/board.php","http://213.32.46.0/board.php","http://54.68.42.4/mainboard.php","http://84.38.133.145/apollom/jeus.php","http://mudeungsan.or.kr/gbbs/bbs/template/g_botton.php","http://www.easyview.kr/board/Kheader.php","http://www.easyview.kr/board/mb_admin.php","http://213.180.180.154/editor/session/aaa000/support.php")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://104.155.149.103/2-443.ps1","http://104.155.149.103/8080.ps1","http://104.155.149.103/mi64.tmp","http://104.155.149.103/mi.tmp","http://104.155.149.103/mm.rar","http://104.155.149.103/pd64.tmp","http://104.155.149.103/rar.tmp","http://104.155.149.103/spr.tmp","http://104.155.149.103/t.tmp","http://104.155.149.103/update.tmp","http://109.248.150.13:8080/1","http://146.4.21.94/tmp/data_preview/virtual.php","http://185.29.8.162:443/1.tmp","http://40.121.90.194/11.jpg","http://40.121.90.194/300dr.cert","http://40.121.90.194/b.cert","http://40.121.90.194/qq.cert","http://40.121.90.194/ra.cert","http://40.121.90.194/Rar.jpg","http://40.121.90.194/tt.rar","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/huntertroy.exe","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/svhostw.exe","http://84.38.133.145/board.html","http://84.38.133.145/header.xml","http://www.ajoa.org/home/manager/template/calendar.php","http://www.ajoa.org/home/rar.tmp","http://www.ajoa.org/home/tmp.ps1","http://www.ajoa.org/home/ztt.tmp","http://www.orvi00.com/ez/admin/shop/powerline.tmp","https://tecnojournals.com/review","https://semiconductboard.com/xml","http://cyancow.com/find","http://155.94.210.11/news/page.php","http://192.186.183.133/bbs/board.php","http://213.32.46.0/board.php","http://54.68.42.4/mainboard.php","http://84.38.133.145/apollom/jeus.php","http://mudeungsan.or.kr/gbbs/bbs/template/g_botton.php","http://www.easyview.kr/board/Kheader.php","http://www.easyview.kr/board/mb_admin.php","http://213.180.180.154/editor/session/aaa000/support.php")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://104.155.149.103/2-443.ps1","http://104.155.149.103/8080.ps1","http://104.155.149.103/mi64.tmp","http://104.155.149.103/mi.tmp","http://104.155.149.103/mm.rar","http://104.155.149.103/pd64.tmp","http://104.155.149.103/rar.tmp","http://104.155.149.103/spr.tmp","http://104.155.149.103/t.tmp","http://104.155.149.103/update.tmp","http://109.248.150.13:8080/1","http://146.4.21.94/tmp/data_preview/virtual.php","http://185.29.8.162:443/1.tmp","http://40.121.90.194/11.jpg","http://40.121.90.194/300dr.cert","http://40.121.90.194/b.cert","http://40.121.90.194/qq.cert","http://40.121.90.194/ra.cert","http://40.121.90.194/Rar.jpg","http://40.121.90.194/tt.rar","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/huntertroy.exe","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/svhostw.exe","http://84.38.133.145/board.html","http://84.38.133.145/header.xml","http://www.ajoa.org/home/manager/template/calendar.php","http://www.ajoa.org/home/rar.tmp","http://www.ajoa.org/home/tmp.ps1","http://www.ajoa.org/home/ztt.tmp","http://www.orvi00.com/ez/admin/shop/powerline.tmp","https://tecnojournals.com/review","https://semiconductboard.com/xml","http://cyancow.com/find","http://155.94.210.11/news/page.php","http://192.186.183.133/bbs/board.php","http://213.32.46.0/board.php","http://54.68.42.4/mainboard.php","http://84.38.133.145/apollom/jeus.php","http://mudeungsan.or.kr/gbbs/bbs/template/g_botton.php","http://www.easyview.kr/board/Kheader.php","http://www.easyview.kr/board/mb_admin.php","http://213.180.180.154/editor/session/aaa000/support.php")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://104.155.149.103/2-443.ps1","http://104.155.149.103/8080.ps1","http://104.155.149.103/mi64.tmp","http://104.155.149.103/mi.tmp","http://104.155.149.103/mm.rar","http://104.155.149.103/pd64.tmp","http://104.155.149.103/rar.tmp","http://104.155.149.103/spr.tmp","http://104.155.149.103/t.tmp","http://104.155.149.103/update.tmp","http://109.248.150.13:8080/1","http://146.4.21.94/tmp/data_preview/virtual.php","http://185.29.8.162:443/1.tmp","http://40.121.90.194/11.jpg","http://40.121.90.194/300dr.cert","http://40.121.90.194/b.cert","http://40.121.90.194/qq.cert","http://40.121.90.194/ra.cert","http://40.121.90.194/Rar.jpg","http://40.121.90.194/tt.rar","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/huntertroy.exe","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/svhostw.exe","http://84.38.133.145/board.html","http://84.38.133.145/header.xml","http://www.ajoa.org/home/manager/template/calendar.php","http://www.ajoa.org/home/rar.tmp","http://www.ajoa.org/home/tmp.ps1","http://www.ajoa.org/home/ztt.tmp","http://www.orvi00.com/ez/admin/shop/powerline.tmp","https://tecnojournals.com/review","https://semiconductboard.com/xml","http://cyancow.com/find","http://155.94.210.11/news/page.php","http://192.186.183.133/bbs/board.php","http://213.32.46.0/board.php","http://54.68.42.4/mainboard.php","http://84.38.133.145/apollom/jeus.php","http://mudeungsan.or.kr/gbbs/bbs/template/g_botton.php","http://www.easyview.kr/board/Kheader.php","http://www.easyview.kr/board/mb_admin.php","http://213.180.180.154/editor/session/aaa000/support.php")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://104.155.149.103/2-443.ps1","http://104.155.149.103/8080.ps1","http://104.155.149.103/mi64.tmp","http://104.155.149.103/mi.tmp","http://104.155.149.103/mm.rar","http://104.155.149.103/pd64.tmp","http://104.155.149.103/rar.tmp","http://104.155.149.103/spr.tmp","http://104.155.149.103/t.tmp","http://104.155.149.103/update.tmp","http://109.248.150.13:8080/1","http://146.4.21.94/tmp/data_preview/virtual.php","http://185.29.8.162:443/1.tmp","http://40.121.90.194/11.jpg","http://40.121.90.194/300dr.cert","http://40.121.90.194/b.cert","http://40.121.90.194/qq.cert","http://40.121.90.194/ra.cert","http://40.121.90.194/Rar.jpg","http://40.121.90.194/tt.rar","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/huntertroy.exe","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/svhostw.exe","http://84.38.133.145/board.html","http://84.38.133.145/header.xml","http://www.ajoa.org/home/manager/template/calendar.php","http://www.ajoa.org/home/rar.tmp","http://www.ajoa.org/home/tmp.ps1","http://www.ajoa.org/home/ztt.tmp","http://www.orvi00.com/ez/admin/shop/powerline.tmp","https://tecnojournals.com/review","https://semiconductboard.com/xml","http://cyancow.com/find","http://155.94.210.11/news/page.php","http://192.186.183.133/bbs/board.php","http://213.32.46.0/board.php","http://54.68.42.4/mainboard.php","http://84.38.133.145/apollom/jeus.php","http://mudeungsan.or.kr/gbbs/bbs/template/g_botton.php","http://www.easyview.kr/board/Kheader.php","http://www.easyview.kr/board/mb_admin.php","http://213.180.180.154/editor/session/aaa000/support.php")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://104.155.149.103/2-443.ps1","http://104.155.149.103/8080.ps1","http://104.155.149.103/mi64.tmp","http://104.155.149.103/mi.tmp","http://104.155.149.103/mm.rar","http://104.155.149.103/pd64.tmp","http://104.155.149.103/rar.tmp","http://104.155.149.103/spr.tmp","http://104.155.149.103/t.tmp","http://104.155.149.103/update.tmp","http://109.248.150.13:8080/1","http://146.4.21.94/tmp/data_preview/virtual.php","http://185.29.8.162:443/1.tmp","http://40.121.90.194/11.jpg","http://40.121.90.194/300dr.cert","http://40.121.90.194/b.cert","http://40.121.90.194/qq.cert","http://40.121.90.194/ra.cert","http://40.121.90.194/Rar.jpg","http://40.121.90.194/tt.rar","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/huntertroy.exe","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/svhostw.exe","http://84.38.133.145/board.html","http://84.38.133.145/header.xml","http://www.ajoa.org/home/manager/template/calendar.php","http://www.ajoa.org/home/rar.tmp","http://www.ajoa.org/home/tmp.ps1","http://www.ajoa.org/home/ztt.tmp","http://www.orvi00.com/ez/admin/shop/powerline.tmp","https://tecnojournals.com/review","https://semiconductboard.com/xml","http://cyancow.com/find","http://155.94.210.11/news/page.php","http://192.186.183.133/bbs/board.php","http://213.32.46.0/board.php","http://54.68.42.4/mainboard.php","http://84.38.133.145/apollom/jeus.php","http://mudeungsan.or.kr/gbbs/bbs/template/g_botton.php","http://www.easyview.kr/board/Kheader.php","http://www.easyview.kr/board/mb_admin.php","http://213.180.180.154/editor/session/aaa000/support.php")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://104.155.149.103/2-443.ps1","http://104.155.149.103/8080.ps1","http://104.155.149.103/mi64.tmp","http://104.155.149.103/mi.tmp","http://104.155.149.103/mm.rar","http://104.155.149.103/pd64.tmp","http://104.155.149.103/rar.tmp","http://104.155.149.103/spr.tmp","http://104.155.149.103/t.tmp","http://104.155.149.103/update.tmp","http://109.248.150.13:8080/1","http://146.4.21.94/tmp/data_preview/virtual.php","http://185.29.8.162:443/1.tmp","http://40.121.90.194/11.jpg","http://40.121.90.194/300dr.cert","http://40.121.90.194/b.cert","http://40.121.90.194/qq.cert","http://40.121.90.194/ra.cert","http://40.121.90.194/Rar.jpg","http://40.121.90.194/tt.rar","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/huntertroy.exe","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/svhostw.exe","http://84.38.133.145/board.html","http://84.38.133.145/header.xml","http://www.ajoa.org/home/manager/template/calendar.php","http://www.ajoa.org/home/rar.tmp","http://www.ajoa.org/home/tmp.ps1","http://www.ajoa.org/home/ztt.tmp","http://www.orvi00.com/ez/admin/shop/powerline.tmp","https://tecnojournals.com/review","https://semiconductboard.com/xml","http://cyancow.com/find","http://155.94.210.11/news/page.php","http://192.186.183.133/bbs/board.php","http://213.32.46.0/board.php","http://54.68.42.4/mainboard.php","http://84.38.133.145/apollom/jeus.php","http://mudeungsan.or.kr/gbbs/bbs/template/g_botton.php","http://www.easyview.kr/board/Kheader.php","http://www.easyview.kr/board/mb_admin.php","http://213.180.180.154/editor/session/aaa000/support.php")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://104.155.149.103/2-443.ps1","http://104.155.149.103/8080.ps1","http://104.155.149.103/mi64.tmp","http://104.155.149.103/mi.tmp","http://104.155.149.103/mm.rar","http://104.155.149.103/pd64.tmp","http://104.155.149.103/rar.tmp","http://104.155.149.103/spr.tmp","http://104.155.149.103/t.tmp","http://104.155.149.103/update.tmp","http://109.248.150.13:8080/1","http://146.4.21.94/tmp/data_preview/virtual.php","http://185.29.8.162:443/1.tmp","http://40.121.90.194/11.jpg","http://40.121.90.194/300dr.cert","http://40.121.90.194/b.cert","http://40.121.90.194/qq.cert","http://40.121.90.194/ra.cert","http://40.121.90.194/Rar.jpg","http://40.121.90.194/tt.rar","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/huntertroy.exe","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/svhostw.exe","http://84.38.133.145/board.html","http://84.38.133.145/header.xml","http://www.ajoa.org/home/manager/template/calendar.php","http://www.ajoa.org/home/rar.tmp","http://www.ajoa.org/home/tmp.ps1","http://www.ajoa.org/home/ztt.tmp","http://www.orvi00.com/ez/admin/shop/powerline.tmp","https://tecnojournals.com/review","https://semiconductboard.com/xml","http://cyancow.com/find","http://155.94.210.11/news/page.php","http://192.186.183.133/bbs/board.php","http://213.32.46.0/board.php","http://54.68.42.4/mainboard.php","http://84.38.133.145/apollom/jeus.php","http://mudeungsan.or.kr/gbbs/bbs/template/g_botton.php","http://www.easyview.kr/board/Kheader.php","http://www.easyview.kr/board/mb_admin.php","http://213.180.180.154/editor/session/aaa000/support.php")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://104.155.149.103/2-443.ps1","http://104.155.149.103/8080.ps1","http://104.155.149.103/mi64.tmp","http://104.155.149.103/mi.tmp","http://104.155.149.103/mm.rar","http://104.155.149.103/pd64.tmp","http://104.155.149.103/rar.tmp","http://104.155.149.103/spr.tmp","http://104.155.149.103/t.tmp","http://104.155.149.103/update.tmp","http://109.248.150.13:8080/1","http://146.4.21.94/tmp/data_preview/virtual.php","http://185.29.8.162:443/1.tmp","http://40.121.90.194/11.jpg","http://40.121.90.194/300dr.cert","http://40.121.90.194/b.cert","http://40.121.90.194/qq.cert","http://40.121.90.194/ra.cert","http://40.121.90.194/Rar.jpg","http://40.121.90.194/tt.rar","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/huntertroy.exe","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/svhostw.exe","http://84.38.133.145/board.html","http://84.38.133.145/header.xml","http://www.ajoa.org/home/manager/template/calendar.php","http://www.ajoa.org/home/rar.tmp","http://www.ajoa.org/home/tmp.ps1","http://www.ajoa.org/home/ztt.tmp","http://www.orvi00.com/ez/admin/shop/powerline.tmp","https://tecnojournals.com/review","https://semiconductboard.com/xml","http://cyancow.com/find","http://155.94.210.11/news/page.php","http://192.186.183.133/bbs/board.php","http://213.32.46.0/board.php","http://54.68.42.4/mainboard.php","http://84.38.133.145/apollom/jeus.php","http://mudeungsan.or.kr/gbbs/bbs/template/g_botton.php","http://www.easyview.kr/board/Kheader.php","http://www.easyview.kr/board/mb_admin.php","http://213.180.180.154/editor/session/aaa000/support.php")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://104.155.149.103/2-443.ps1","http://104.155.149.103/8080.ps1","http://104.155.149.103/mi64.tmp","http://104.155.149.103/mi.tmp","http://104.155.149.103/mm.rar","http://104.155.149.103/pd64.tmp","http://104.155.149.103/rar.tmp","http://104.155.149.103/spr.tmp","http://104.155.149.103/t.tmp","http://104.155.149.103/update.tmp","http://109.248.150.13:8080/1","http://146.4.21.94/tmp/data_preview/virtual.php","http://185.29.8.162:443/1.tmp","http://40.121.90.194/11.jpg","http://40.121.90.194/300dr.cert","http://40.121.90.194/b.cert","http://40.121.90.194/qq.cert","http://40.121.90.194/ra.cert","http://40.121.90.194/Rar.jpg","http://40.121.90.194/tt.rar","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/huntertroy.exe","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/svhostw.exe","http://84.38.133.145/board.html","http://84.38.133.145/header.xml","http://www.ajoa.org/home/manager/template/calendar.php","http://www.ajoa.org/home/rar.tmp","http://www.ajoa.org/home/tmp.ps1","http://www.ajoa.org/home/ztt.tmp","http://www.orvi00.com/ez/admin/shop/powerline.tmp","https://tecnojournals.com/review","https://semiconductboard.com/xml","http://cyancow.com/find","http://155.94.210.11/news/page.php","http://192.186.183.133/bbs/board.php","http://213.32.46.0/board.php","http://54.68.42.4/mainboard.php","http://84.38.133.145/apollom/jeus.php","http://mudeungsan.or.kr/gbbs/bbs/template/g_botton.php","http://www.easyview.kr/board/Kheader.php","http://www.easyview.kr/board/mb_admin.php","http://213.180.180.154/editor/session/aaa000/support.php")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://104.155.149.103/2-443.ps1","http://104.155.149.103/8080.ps1","http://104.155.149.103/mi64.tmp","http://104.155.149.103/mi.tmp","http://104.155.149.103/mm.rar","http://104.155.149.103/pd64.tmp","http://104.155.149.103/rar.tmp","http://104.155.149.103/spr.tmp","http://104.155.149.103/t.tmp","http://104.155.149.103/update.tmp","http://109.248.150.13:8080/1","http://146.4.21.94/tmp/data_preview/virtual.php","http://185.29.8.162:443/1.tmp","http://40.121.90.194/11.jpg","http://40.121.90.194/300dr.cert","http://40.121.90.194/b.cert","http://40.121.90.194/qq.cert","http://40.121.90.194/ra.cert","http://40.121.90.194/Rar.jpg","http://40.121.90.194/tt.rar","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/huntertroy.exe","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/svhostw.exe","http://84.38.133.145/board.html","http://84.38.133.145/header.xml","http://www.ajoa.org/home/manager/template/calendar.php","http://www.ajoa.org/home/rar.tmp","http://www.ajoa.org/home/tmp.ps1","http://www.ajoa.org/home/ztt.tmp","http://www.orvi00.com/ez/admin/shop/powerline.tmp","https://tecnojournals.com/review","https://semiconductboard.com/xml","http://cyancow.com/find","http://155.94.210.11/news/page.php","http://192.186.183.133/bbs/board.php","http://213.32.46.0/board.php","http://54.68.42.4/mainboard.php","http://84.38.133.145/apollom/jeus.php","http://mudeungsan.or.kr/gbbs/bbs/template/g_botton.php","http://www.easyview.kr/board/Kheader.php","http://www.easyview.kr/board/mb_admin.php","http://213.180.180.154/editor/session/aaa000/support.php")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://104.155.149.103/2-443.ps1","http://104.155.149.103/8080.ps1","http://104.155.149.103/mi64.tmp","http://104.155.149.103/mi.tmp","http://104.155.149.103/mm.rar","http://104.155.149.103/pd64.tmp","http://104.155.149.103/rar.tmp","http://104.155.149.103/spr.tmp","http://104.155.149.103/t.tmp","http://104.155.149.103/update.tmp","http://109.248.150.13:8080/1","http://146.4.21.94/tmp/data_preview/virtual.php","http://185.29.8.162:443/1.tmp","http://40.121.90.194/11.jpg","http://40.121.90.194/300dr.cert","http://40.121.90.194/b.cert","http://40.121.90.194/qq.cert","http://40.121.90.194/ra.cert","http://40.121.90.194/Rar.jpg","http://40.121.90.194/tt.rar","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/huntertroy.exe","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/svhostw.exe","http://84.38.133.145/board.html","http://84.38.133.145/header.xml","http://www.ajoa.org/home/manager/template/calendar.php","http://www.ajoa.org/home/rar.tmp","http://www.ajoa.org/home/tmp.ps1","http://www.ajoa.org/home/ztt.tmp","http://www.orvi00.com/ez/admin/shop/powerline.tmp","https://tecnojournals.com/review","https://semiconductboard.com/xml","http://cyancow.com/find","http://155.94.210.11/news/page.php","http://192.186.183.133/bbs/board.php","http://213.32.46.0/board.php","http://54.68.42.4/mainboard.php","http://84.38.133.145/apollom/jeus.php","http://mudeungsan.or.kr/gbbs/bbs/template/g_botton.php","http://www.easyview.kr/board/Kheader.php","http://www.easyview.kr/board/mb_admin.php","http://213.180.180.154/editor/session/aaa000/support.php")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://104.155.149.103/2-443.ps1","http://104.155.149.103/8080.ps1","http://104.155.149.103/mi64.tmp","http://104.155.149.103/mi.tmp","http://104.155.149.103/mm.rar","http://104.155.149.103/pd64.tmp","http://104.155.149.103/rar.tmp","http://104.155.149.103/spr.tmp","http://104.155.149.103/t.tmp","http://104.155.149.103/update.tmp","http://109.248.150.13:8080/1","http://146.4.21.94/tmp/data_preview/virtual.php","http://185.29.8.162:443/1.tmp","http://40.121.90.194/11.jpg","http://40.121.90.194/300dr.cert","http://40.121.90.194/b.cert","http://40.121.90.194/qq.cert","http://40.121.90.194/ra.cert","http://40.121.90.194/Rar.jpg","http://40.121.90.194/tt.rar","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/huntertroy.exe","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/svhostw.exe","http://84.38.133.145/board.html","http://84.38.133.145/header.xml","http://www.ajoa.org/home/manager/template/calendar.php","http://www.ajoa.org/home/rar.tmp","http://www.ajoa.org/home/tmp.ps1","http://www.ajoa.org/home/ztt.tmp","http://www.orvi00.com/ez/admin/shop/powerline.tmp","https://tecnojournals.com/review","https://semiconductboard.com/xml","http://cyancow.com/find","http://155.94.210.11/news/page.php","http://192.186.183.133/bbs/board.php","http://213.32.46.0/board.php","http://54.68.42.4/mainboard.php","http://84.38.133.145/apollom/jeus.php","http://mudeungsan.or.kr/gbbs/bbs/template/g_botton.php","http://www.easyview.kr/board/Kheader.php","http://www.easyview.kr/board/mb_admin.php","http://213.180.180.154/editor/session/aaa000/support.php")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://104.155.149.103/2-443.ps1","http://104.155.149.103/8080.ps1","http://104.155.149.103/mi64.tmp","http://104.155.149.103/mi.tmp","http://104.155.149.103/mm.rar","http://104.155.149.103/pd64.tmp","http://104.155.149.103/rar.tmp","http://104.155.149.103/spr.tmp","http://104.155.149.103/t.tmp","http://104.155.149.103/update.tmp","http://109.248.150.13:8080/1","http://146.4.21.94/tmp/data_preview/virtual.php","http://185.29.8.162:443/1.tmp","http://40.121.90.194/11.jpg","http://40.121.90.194/300dr.cert","http://40.121.90.194/b.cert","http://40.121.90.194/qq.cert","http://40.121.90.194/ra.cert","http://40.121.90.194/Rar.jpg","http://40.121.90.194/tt.rar","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/huntertroy.exe","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/svhostw.exe","http://84.38.133.145/board.html","http://84.38.133.145/header.xml","http://www.ajoa.org/home/manager/template/calendar.php","http://www.ajoa.org/home/rar.tmp","http://www.ajoa.org/home/tmp.ps1","http://www.ajoa.org/home/ztt.tmp","http://www.orvi00.com/ez/admin/shop/powerline.tmp","https://tecnojournals.com/review","https://semiconductboard.com/xml","http://cyancow.com/find","http://155.94.210.11/news/page.php","http://192.186.183.133/bbs/board.php","http://213.32.46.0/board.php","http://54.68.42.4/mainboard.php","http://84.38.133.145/apollom/jeus.php","http://mudeungsan.or.kr/gbbs/bbs/template/g_botton.php","http://www.easyview.kr/board/Kheader.php","http://www.easyview.kr/board/mb_admin.php","http://213.180.180.154/editor/session/aaa000/support.php")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://104.155.149.103/2-443.ps1","http://104.155.149.103/8080.ps1","http://104.155.149.103/mi64.tmp","http://104.155.149.103/mi.tmp","http://104.155.149.103/mm.rar","http://104.155.149.103/pd64.tmp","http://104.155.149.103/rar.tmp","http://104.155.149.103/spr.tmp","http://104.155.149.103/t.tmp","http://104.155.149.103/update.tmp","http://109.248.150.13:8080/1","http://146.4.21.94/tmp/data_preview/virtual.php","http://185.29.8.162:443/1.tmp","http://40.121.90.194/11.jpg","http://40.121.90.194/300dr.cert","http://40.121.90.194/b.cert","http://40.121.90.194/qq.cert","http://40.121.90.194/ra.cert","http://40.121.90.194/Rar.jpg","http://40.121.90.194/tt.rar","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/huntertroy.exe","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/svhostw.exe","http://84.38.133.145/board.html","http://84.38.133.145/header.xml","http://www.ajoa.org/home/manager/template/calendar.php","http://www.ajoa.org/home/rar.tmp","http://www.ajoa.org/home/tmp.ps1","http://www.ajoa.org/home/ztt.tmp","http://www.orvi00.com/ez/admin/shop/powerline.tmp","https://tecnojournals.com/review","https://semiconductboard.com/xml","http://cyancow.com/find","http://155.94.210.11/news/page.php","http://192.186.183.133/bbs/board.php","http://213.32.46.0/board.php","http://54.68.42.4/mainboard.php","http://84.38.133.145/apollom/jeus.php","http://mudeungsan.or.kr/gbbs/bbs/template/g_botton.php","http://www.easyview.kr/board/Kheader.php","http://www.easyview.kr/board/mb_admin.php","http://213.180.180.154/editor/session/aaa000/support.php")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://104.155.149.103/2-443.ps1","http://104.155.149.103/8080.ps1","http://104.155.149.103/mi64.tmp","http://104.155.149.103/mi.tmp","http://104.155.149.103/mm.rar","http://104.155.149.103/pd64.tmp","http://104.155.149.103/rar.tmp","http://104.155.149.103/spr.tmp","http://104.155.149.103/t.tmp","http://104.155.149.103/update.tmp","http://109.248.150.13:8080/1","http://146.4.21.94/tmp/data_preview/virtual.php","http://185.29.8.162:443/1.tmp","http://40.121.90.194/11.jpg","http://40.121.90.194/300dr.cert","http://40.121.90.194/b.cert","http://40.121.90.194/qq.cert","http://40.121.90.194/ra.cert","http://40.121.90.194/Rar.jpg","http://40.121.90.194/tt.rar","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/huntertroy.exe","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/svhostw.exe","http://84.38.133.145/board.html","http://84.38.133.145/header.xml","http://www.ajoa.org/home/manager/template/calendar.php","http://www.ajoa.org/home/rar.tmp","http://www.ajoa.org/home/tmp.ps1","http://www.ajoa.org/home/ztt.tmp","http://www.orvi00.com/ez/admin/shop/powerline.tmp","https://tecnojournals.com/review","https://semiconductboard.com/xml","http://cyancow.com/find","http://155.94.210.11/news/page.php","http://192.186.183.133/bbs/board.php","http://213.32.46.0/board.php","http://54.68.42.4/mainboard.php","http://84.38.133.145/apollom/jeus.php","http://mudeungsan.or.kr/gbbs/bbs/template/g_botton.php","http://www.easyview.kr/board/Kheader.php","http://www.easyview.kr/board/mb_admin.php","http://213.180.180.154/editor/session/aaa000/support.php")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://104.155.149.103/2-443.ps1","http://104.155.149.103/8080.ps1","http://104.155.149.103/mi64.tmp","http://104.155.149.103/mi.tmp","http://104.155.149.103/mm.rar","http://104.155.149.103/pd64.tmp","http://104.155.149.103/rar.tmp","http://104.155.149.103/spr.tmp","http://104.155.149.103/t.tmp","http://104.155.149.103/update.tmp","http://109.248.150.13:8080/1","http://146.4.21.94/tmp/data_preview/virtual.php","http://185.29.8.162:443/1.tmp","http://40.121.90.194/11.jpg","http://40.121.90.194/300dr.cert","http://40.121.90.194/b.cert","http://40.121.90.194/qq.cert","http://40.121.90.194/ra.cert","http://40.121.90.194/Rar.jpg","http://40.121.90.194/tt.rar","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/huntertroy.exe","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/svhostw.exe","http://84.38.133.145/board.html","http://84.38.133.145/header.xml","http://www.ajoa.org/home/manager/template/calendar.php","http://www.ajoa.org/home/rar.tmp","http://www.ajoa.org/home/tmp.ps1","http://www.ajoa.org/home/ztt.tmp","http://www.orvi00.com/ez/admin/shop/powerline.tmp","https://tecnojournals.com/review","https://semiconductboard.com/xml","http://cyancow.com/find","http://155.94.210.11/news/page.php","http://192.186.183.133/bbs/board.php","http://213.32.46.0/board.php","http://54.68.42.4/mainboard.php","http://84.38.133.145/apollom/jeus.php","http://mudeungsan.or.kr/gbbs/bbs/template/g_botton.php","http://www.easyview.kr/board/Kheader.php","http://www.easyview.kr/board/mb_admin.php","http://213.180.180.154/editor/session/aaa000/support.php")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://104.155.149.103/2-443.ps1","http://104.155.149.103/8080.ps1","http://104.155.149.103/mi64.tmp","http://104.155.149.103/mi.tmp","http://104.155.149.103/mm.rar","http://104.155.149.103/pd64.tmp","http://104.155.149.103/rar.tmp","http://104.155.149.103/spr.tmp","http://104.155.149.103/t.tmp","http://104.155.149.103/update.tmp","http://109.248.150.13:8080/1","http://146.4.21.94/tmp/data_preview/virtual.php","http://185.29.8.162:443/1.tmp","http://40.121.90.194/11.jpg","http://40.121.90.194/300dr.cert","http://40.121.90.194/b.cert","http://40.121.90.194/qq.cert","http://40.121.90.194/ra.cert","http://40.121.90.194/Rar.jpg","http://40.121.90.194/tt.rar","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/huntertroy.exe","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/svhostw.exe","http://84.38.133.145/board.html","http://84.38.133.145/header.xml","http://www.ajoa.org/home/manager/template/calendar.php","http://www.ajoa.org/home/rar.tmp","http://www.ajoa.org/home/tmp.ps1","http://www.ajoa.org/home/ztt.tmp","http://www.orvi00.com/ez/admin/shop/powerline.tmp","https://tecnojournals.com/review","https://semiconductboard.com/xml","http://cyancow.com/find","http://155.94.210.11/news/page.php","http://192.186.183.133/bbs/board.php","http://213.32.46.0/board.php","http://54.68.42.4/mainboard.php","http://84.38.133.145/apollom/jeus.php","http://mudeungsan.or.kr/gbbs/bbs/template/g_botton.php","http://www.easyview.kr/board/Kheader.php","http://www.easyview.kr/board/mb_admin.php","http://213.180.180.154/editor/session/aaa000/support.php")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://104.155.149.103/2-443.ps1","http://104.155.149.103/8080.ps1","http://104.155.149.103/mi64.tmp","http://104.155.149.103/mi.tmp","http://104.155.149.103/mm.rar","http://104.155.149.103/pd64.tmp","http://104.155.149.103/rar.tmp","http://104.155.149.103/spr.tmp","http://104.155.149.103/t.tmp","http://104.155.149.103/update.tmp","http://109.248.150.13:8080/1","http://146.4.21.94/tmp/data_preview/virtual.php","http://185.29.8.162:443/1.tmp","http://40.121.90.194/11.jpg","http://40.121.90.194/300dr.cert","http://40.121.90.194/b.cert","http://40.121.90.194/qq.cert","http://40.121.90.194/ra.cert","http://40.121.90.194/Rar.jpg","http://40.121.90.194/tt.rar","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/huntertroy.exe","http://46.183.221.109//dfdfdfdfdfdfdfdfdfaflakjdfljaldjfladfljaldkfjlajdsflajdskf/svhostw.exe","http://84.38.133.145/board.html","http://84.38.133.145/header.xml","http://www.ajoa.org/home/manager/template/calendar.php","http://www.ajoa.org/home/rar.tmp","http://www.ajoa.org/home/tmp.ps1","http://www.ajoa.org/home/ztt.tmp","http://www.orvi00.com/ez/admin/shop/powerline.tmp","https://tecnojournals.com/review","https://semiconductboard.com/xml","http://cyancow.com/find","http://155.94.210.11/news/page.php","http://192.186.183.133/bbs/board.php","http://213.32.46.0/board.php","http://54.68.42.4/mainboard.php","http://84.38.133.145/apollom/jeus.php","http://mudeungsan.or.kr/gbbs/bbs/template/g_botton.php","http://www.easyview.kr/board/Kheader.php","http://www.easyview.kr/board/mb_admin.php","http://213.180.180.154/editor/session/aaa000/support.php")
index=activity AND rg_functionality="Endpoint Management Systems" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Endpoint Management Systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Flow" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Web Server" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Application Security Broker" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Source Code Repository" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Flow" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Web Server" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="DNS / DHCP" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="DNS / DHCP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Endpoint management systems" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Microsoft Windows" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Microsoft Windows" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Microsoft Windows" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Microsoft Windows" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Microsoft Windows" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Services / Applications" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Application Audit" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Authentication / VPN" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Unix / Linux / AIX" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Network Access Control / NAC" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Network Access Control / NAC" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Network Access Control / NAC" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Virtualization / Containers" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Virtualization / Containers" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Virtualization / Containers" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Access / Privileged User" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Access / Privileged User" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Access / Privileged User" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Access / Privileged User" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Access / Privileged User" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Access / Identity Management" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Access / Identity Management" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Access / Identity Management" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Access / Identity Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Access / Identity Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Identity Access Management" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Identity Access Management" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Identity Access Management" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Identity Access Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Identity Access Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Authentication / WiFi" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Application Security Broker" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Source Code Repository" AND ipaddress NOT NULL AND ipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND translatedipaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("104.155.149.103","40.121.90.194","185.29.8.162","146.4.21.94","46.183.221.109","84.38.133.145","109.248.150.13","155.94.210.11","192.186.183.133","54.68.42.4","84.38.133.145","213.180.180.154")
